Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230371 7.5 危険 videodb - VideoDB の core/pdf.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5155 2012-12-20 18:02 2006-10-5 Show GitHub Exploit DB Packet Storm
230372 7.5 危険 vamp webmail - VAMP Webmail の wamp_dir/setup/yesno.phtml における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5147 2012-12-20 18:02 2006-10-5 Show GitHub Exploit DB Packet Storm
230373 6.8 警告 y-blog - Yblog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5146 2012-12-20 18:02 2006-10-5 Show GitHub Exploit DB Packet Storm
230374 5 警告 UBB Systems - Groupee UBB.threads における重要な情報を取得される脆弱性 - CVE-2006-5138 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
230375 5.1 警告 UBB Systems - Groupee UBB.threads における PHP コードを挿入される脆弱性 - CVE-2006-5137 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
230376 7.5 危険 UBB Systems - Groupee UBB.threads の ubbt.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5136 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
230377 7.5 危険 steve poulsen - GuildFTPd におけるバッファオーバーフローの脆弱性 - CVE-2006-5133 2012-12-20 18:02 2006-05-26 Show GitHub Exploit DB Packet Storm
230378 7.5 危険 phpmyagenda - phpMyAgenda における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5132 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
230379 7.5 危険 salims softhouse - ph03y3nk JAF CMS の module/shout/jafshout.php における "" で囲まれたセクション内の任意のコードを実行される脆弱性 - CVE-2006-5131 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
230380 6.8 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5130 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313771 - - - In the OAuth library for nim prior to version 0.11, the `state` values generated by the `generateState` function do not have sufficient entropy. These can be successfully guessed by an attacker allow… - CVE-2024-42475 2024-08-19 22:00 2024-08-16 Show GitHub Exploit DB Packet Storm
313772 - - - ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript (JavaScript) specification of async generators, introduced by a May 2021 spec refactor, may l… - CVE-2024-43357 2024-08-19 22:00 2024-08-16 Show GitHub Exploit DB Packet Storm
313773 - - - Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter. - CVE-2024-27731 2024-08-19 22:00 2024-08-16 Show GitHub Exploit DB Packet Storm
313774 - - - Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature. - CVE-2024-27730 2024-08-19 22:00 2024-08-16 Show GitHub Exploit DB Packet Storm
313775 - - - Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution. - CVE-2024-23168 2024-08-19 22:00 2024-08-16 Show GitHub Exploit DB Packet Storm
313776 - - - XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users to submit malicious XML via unspecified features which cou… - CVE-2024-22218 2024-08-19 22:00 2024-08-16 Show GitHub Exploit DB Packet Storm
313777 - - - Module savepoints could be abused to inject references to malicious code delivered through the same domain. Attackers could perform malicious API requests or extract information from the users accoun… - CVE-2024-25582 2024-08-19 21:59 2024-08-19 Show GitHub Exploit DB Packet Storm
313778 - - - Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-43350 2024-08-19 21:59 2024-08-19 Show GitHub Exploit DB Packet Storm
313779 - - - Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100. - CVE-2024-43322 2024-08-19 21:59 2024-08-19 Show GitHub Exploit DB Packet Storm
313780 - - - Authorization Bypass Through User-Controlled Key vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This issue affects Stripe Payments For WooCommerce by Checkout: from n/a… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-43315 2024-08-19 21:59 2024-08-19 Show GitHub Exploit DB Packet Storm