Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229101 7.5 危険 Sendmail Consortium - Red Hat Enterprise Linux 上で稼動する Sendmail における想定より少ないセキュアチャネルが使用される脆弱性 - CVE-2006-7175 2012-12-20 18:19 2005-11-3 Show GitHub Exploit DB Packet Storm
229102 1.9 注意 Simon Tatham - PuTTY における重要な情報を取得される脆弱性 - CVE-2006-7162 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
229103 10 危険 phpBB - Brazilian PHPBB の maluinfo における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7148 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
229104 6.8 警告 phpBB - phpBB Import Tools Mod の includes/functions_mod_user.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7147 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
229105 4.1 警告 utimaco safeware - Utimaco Safeguard の集中管理機能における設定ファイルから暗号鍵を復元される脆弱性 CWE-310
暗号の問題 		CVE-2006-7142 2012-12-20 18:18 2007-03-7 Show GitHub Exploit DB Packet Storm
229106 4.3 警告 tinyportal - TinyPortal におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7137 2012-12-20 18:18 2007-03-6 Show GitHub Exploit DB Packet Storm
229107 10 危険 phppc - phpPC における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7136 2012-12-20 18:18 2007-03-6 Show GitHub Exploit DB Packet Storm
229108 7.5 危険 salims softhouse - forum/forum.php JAF CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7128 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
229109 6.8 警告 salims softhouse - JAF CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-7127 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
229110 7.5 危険 phpgiggle - comscripts.com 上で配布されている J. He PHPGiggle における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7119 2012-12-20 18:18 2007-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312801 - - - matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL preview… - CVE-2024-42347 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
312802 - - - Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions up to but not including 1.6.0. Qwik improperly escapes HTML on server-side rende… - CVE-2024-41677 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
312803 - - - A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code. - CVE-2024-7502 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
312804 - - - PDFio is a simple C library for reading and writing PDF files. There is a denial of service (DOS) vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% … - CVE-2024-42358 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
312805 - - - The lacks CSRF checks allowing a user to invite any user to any group (including private groups) - CVE-2024-2232 2024-08-7 23:35 2024-08-5 Show GitHub Exploit DB Packet Storm
312806 - - - The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers to make logged in users perform such action via a CSRF attack - CVE-2024-6496 2024-08-7 23:35 2024-08-1 Show GitHub Exploit DB Packet Storm
312807 - - - ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgi_main of the file /soap.cgi. The manipula… CWE-78
OS Command  		CVE-2024-7357 2024-08-7 23:15 2024-08-1 Show GitHub Exploit DB Packet Storm
312808 - - - Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTM… - CVE-2024-7000 2024-08-7 22:35 2024-08-7 Show GitHub Exploit DB Packet Storm
312809 - typo3 typo3 SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating … CWE-89
SQL Injection 		CVE-2009-4855 2024-08-7 17:16 2010-05-11 Show GitHub Exploit DB Packet Storm
312810 - - - The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting (XSS)… - CVE-2024-6494 2024-08-7 15:16 2024-08-7 Show GitHub Exploit DB Packet Storm