Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230471 4.3 警告 Ykoon B.V.  - Ykoon RssReader におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4762 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230472 3.6 注意 PunBB - PunBB におけるコードを実行される脆弱性 - CVE-2006-4759 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230473 4.6 警告 phpBB - phpBB における任意のファイルをアップロードされる脆弱性 - CVE-2006-4758 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230474 7.5 危険 phpmydirectory - phpMyDirectory の alpha.php における SQL インジェクションの脆弱性 - CVE-2006-4756 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230475 4.3 警告 phpmydirectory - phpMyDirectory の alpha.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4755 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230476 3.6 注意 scarybear - ScaryBear PocketExpense Pro における認証を無効にされる脆弱性 - CVE-2006-4745 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230477 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 - CVE-2006-4743 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230478 7.5 危険 Tiki Software Community Association - Tikiwiki の tiki-g-admin_processes.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-4734 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230479 7.5 危険 sips - Haakon Nilsen simple などの sipssys/code/box.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4733 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230480 4.3 警告 tumbleweed - Tumbleweed EMF Administration Module の emfadmin/statusView.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-4727 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313881 - novell groupwise
groupwise_webaccess 		NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as… NVD-CWE-Other
CVE-2005-0296 2024-08-8 06:15 2005-01-17 Show GitHub Exploit DB Packet Storm
313882 9.8 CRITICAL
Network 		dlink dir-300_firmware D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service. CWE-798
 Use of Hard-coded Credentials 		CVE-2024-41616 2024-08-8 05:54 2024-08-7 Show GitHub Exploit DB Packet Storm
313883 6.1 MEDIUM
Network 		phpgurukul tourism_management_system A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted… CWE-79
Cross-site Scripting 		CVE-2024-41333 2024-08-8 05:54 2024-08-7 Show GitHub Exploit DB Packet Storm
313884 8.8 HIGH
Network 		google chrome Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free 		CVE-2024-6988 2024-08-8 05:51 2024-08-7 Show GitHub Exploit DB Packet Storm
313885 4.7 MEDIUM
Network 		google chrome Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of… NVD-CWE-noinfo
CVE-2024-6995 2024-08-8 05:35 2024-08-7 Show GitHub Exploit DB Packet Storm
313886 - - - An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method. - CVE-2024-41264 2024-08-8 05:35 2024-08-2 Show GitHub Exploit DB Packet Storm
313887 - - - The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin users delete users via CSRF attacks - CVE-2024-2843 2024-08-8 05:35 2024-08-1 Show GitHub Exploit DB Packet Storm
313888 - abarcar abarcar_realty_portal Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid parameter to newsdetails.php, or the (2) slid parameter to sl… CWE-89
SQL Injection 		CVE-2006-5840 2024-08-8 05:15 2006-11-10 Show GitHub Exploit DB Packet Storm
313889 - marc_cagninacci mclinkscounter Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2)… CWE-94
Code Injection 		CVE-2006-4863 2024-08-8 05:15 2006-09-20 Show GitHub Exploit DB Packet Storm
313890 - hitweb hitweb Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REP_CLASS parameter to (1) index.php, (2) arbo.php,… NVD-CWE-Other
CVE-2006-4848 2024-08-8 05:15 2006-09-19 Show GitHub Exploit DB Packet Storm