Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227931 6.4 警告 professional home page tools - Professional Home Page Tools Guestbook の管理ログインにおけるパスワードを推測する総当り攻撃を実行される脆弱性 - CVE-2006-3753 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227932 7.5 危険 professional home page tools - Professional Home Page Tools Guestbook の class.php における SQL インジェクションの脆弱性 - CVE-2006-3752 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227933 6.8 警告 htmlarea3 - ImageManager 用の HTMLArea3 Addon Component における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3751 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227934 6.8 警告 hashcash - Joomla! 用の com_hashcash の server.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3750 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227935 6.8 警告 Mambo Foundation - Mambo 用の Sitemap コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3749 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
227936 6.8 警告 mamboxchange - Mambo 用の LoudMouth コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3748 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227937 4.3 警告 swsoft - SWsoft Plesk のコントロールパネルにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3737 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227938 7.5 危険 Mambo Foundation - Mambo 用の VideoDB コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3736 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
227939 5.1 警告 mail2forum - phpBB 用の Mail2Forum モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3735 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227940 7.2 危険 シスコシステムズ - CS-MARS 用の CLI におけるルート権限で任意のコマンドを実行される脆弱性 - CVE-2006-3734 2012-12-20 18:02 2006-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 7.7 HIGH
Network 		adobe coldfusion ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature… New CWE-22
Path Traversal 		CVE-2026-34619 2026-04-16 23:28 2026-04-15 Show GitHub Exploit DB Packet Storm
82 5.4 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Google Chat group policy enforcement that relies on mutable space display names. Attackers can rebind group policies by cha… New CWE-807
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-35617 2026-04-16 23:19 2026-04-10 Show GitHub Exploit DB Packet Storm
83 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.25 contains a missing rate limiting vulnerability in webhook authentication that allows attackers to brute-force weak webhook passwords without throttling. Remote attackers can… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-35623 2026-04-16 23:17 2026-04-10 Show GitHub Exploit DB Packet Storm
84 5.3 MEDIUM
Network 		- - @fastify/static versions 8.0.0 through 9.1.0 allow path traversal when directory listing is enabled via the list option. The dirList.path() function resolves directories outside the configured static… New CWE-22
Path Traversal 		CVE-2026-6410 2026-04-16 23:16 2026-04-16 Show GitHub Exploit DB Packet Storm
85 6.5 MEDIUM
Network 		- - Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (Chromium security se… New CWE-125
Out-of-bounds Read 		CVE-2026-6364 2026-04-16 23:16 2026-04-16 Show GitHub Exploit DB Packet Storm
86 6.3 MEDIUM
Network 		- - Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: H… New CWE-416
 Use After Free 		CVE-2026-6362 2026-04-16 23:16 2026-04-16 Show GitHub Exploit DB Packet Storm
87 9.1 CRITICAL
Network 		- - @fastify/middie versions 9.3.1 and earlier do not register inherited middleware directly on child plugin engine instances. When a Fastify application registers authentication middleware in a parent s… New CWE-436
 Interpretation Conflict 		CVE-2026-6270 2026-04-16 23:16 2026-04-16 Show GitHub Exploit DB Packet Storm
88 8.1 HIGH
Network 		- - Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module. New CWE-89
SQL Injection 		CVE-2026-5785 2026-04-16 23:16 2026-04-16 Show GitHub Exploit DB Packet Storm
89 5.3 MEDIUM
Network 		- - The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'submission_id' parameter in … New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-4160 2026-04-16 23:16 2026-04-16 Show GitHub Exploit DB Packet Storm
90 7.4 HIGH
Local 		- - radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release… New CWE-78
OS Command  		CVE-2026-41015 2026-04-16 23:16 2026-04-16 Show GitHub Exploit DB Packet Storm