Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227311 7.5 危険 ultrasite - UltraSite の update.asp における SQL インジェクションの脆弱性 - CVE-2006-5933 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227312 7.5 危険 phpjobscheduler - Phpjobscheduler の firepjs.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5929 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227313 7.5 危険 phpjobscheduler - Phpjobscheduler における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5928 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227314 7.5 危険 vallheru - Vallheru の mail.php における SQL インジェクションの脆弱性 - CVE-2006-5926 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227315 5 警告 wheatblog - wB の index.php における重要な情報を取得される脆弱性 - CVE-2006-5922 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227316 5.8 警告 wheatblog - wB の add_comment.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5921 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227317 6.8 警告 SAMEDIA O.E. - SAMEDIA LandShop の ls.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5915 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227318 7.5 危険 SAMEDIA O.E. - SAMEDIA LandShop の ls.php における SQL インジェクションの脆弱性 - CVE-2006-5914 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227319 6.4 警告 web directory pro - Web Directory Pro におけるコンフィギュレーションを変更される脆弱性 - CVE-2006-5905 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
227320 7.5 危険 rahul jonna - Rahul Jonna GSpace における仮想ファイルシステム操作を実行される脆弱性 - CVE-2006-5903 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 6.3 MEDIUM
Network 		- - A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipul… Update CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-6571 2026-04-23 05:22 2026-04-19 Show GitHub Exploit DB Packet Storm
462 5.6 MEDIUM
Network 		- - A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of the component fileU… Update CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-6572 2026-04-23 05:22 2026-04-19 Show GitHub Exploit DB Packet Storm
463 6.3 MEDIUM
Network 		- - A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of t… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-6573 2026-04-23 05:22 2026-04-19 Show GitHub Exploit DB Packet Storm
464 7.3 HIGH
Network 		- - A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown processing of the file /public/install/lp.sql of the component API Upload Endpoint. Such manipulation… Update CWE-259
CWE-798
Use of Hard-coded Password 
 Use of Hard-coded Credentials 		CVE-2026-6574 2026-04-23 05:22 2026-04-19 Show GitHub Exploit DB Packet Storm
465 6.3 MEDIUM
Network 		- - A vulnerability was determined in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the function CommandHandler of the file servermanager/api/commonapi.py of the component WeChat Bot Int… Update CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-6576 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
466 7.3 HIGH
Network 		- - A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulati… Update CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-6577 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
467 6.5 MEDIUM
Network 		- - A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing a… Update CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-6579 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
468 7.3 HIGH
Network 		- - A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipu… Update CWE-320
CWE-321
 Key Management Errors
 Use of Hard-coded Cryptographic Key 		CVE-2026-6580 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
469 5.6 MEDIUM
Network 		- - A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component Setting Handler. The manipulation of… Update CWE-259
CWE-798
Use of Hard-coded Password 
 Use of Hard-coded Credentials 		CVE-2026-6578 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
470 8.8 HIGH
Network 		- - A vulnerability was detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function SetMobileAPInfoById of the file /goform/aspForm. Performing a manipulation of the argument p… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-6581 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm