Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230691 7.5 危険 trawler - Trawler Web CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5495 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230692 7.5 危険 PHPNUKE - PHP-Nuke 用の pandaBB モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5494 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230693 5 警告 BlackBerry - IBM Lotus Domino 用の RIM BlackBerry Enterprise Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5489 2012-12-20 18:02 2006-10-6 Show GitHub Exploit DB Packet Storm
230694 7.5 危険 xchangeboard - XchangeBoard における SQL インジェクションの脆弱性 - CVE-2006-5488 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230695 4.3 警告 サン・マイクロシステムズ - Sun Java System Messaging Server および iPlanet Messaging Server の Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-5486 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230696 7.5 危険 speedberg - SpeedBerg における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5485 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230697 5 警告 SSH コミュニケーションズ・セキュリティ - SSH Tectia Client/Server/Connector などの製品における RSA 鍵で署名済みの PKCS #1 署名を偽装される脆弱性 - CVE-2006-5484 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230698 7.5 危険 softerra - Softerra PHP Developer Library における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5472 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230699 7.5 危険 softerra - Softerra PHP Developer Library の example/lib/grid3.lib.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5471 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230700 5.4 警告 RPM
Canonical		 - RPM Package Manager の librpm におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-5466 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314001 9.8 CRITICAL
Network 		vivotek cc8160_firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function getenv of the file upload_file.cgi. The manipulat… CWE-77
Command Injection 		CVE-2024-7440 2024-08-8 06:15 2024-08-4 Show GitHub Exploit DB Packet Storm
314002 - novell groupwise
groupwise_webaccess 		NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as… NVD-CWE-Other
CVE-2005-0296 2024-08-8 06:15 2005-01-17 Show GitHub Exploit DB Packet Storm
314003 9.8 CRITICAL
Network 		dlink dir-300_firmware D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service. CWE-798
 Use of Hard-coded Credentials 		CVE-2024-41616 2024-08-8 05:54 2024-08-7 Show GitHub Exploit DB Packet Storm
314004 6.1 MEDIUM
Network 		phpgurukul tourism_management_system A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted… CWE-79
Cross-site Scripting 		CVE-2024-41333 2024-08-8 05:54 2024-08-7 Show GitHub Exploit DB Packet Storm
314005 8.8 HIGH
Network 		google chrome Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free 		CVE-2024-6988 2024-08-8 05:51 2024-08-7 Show GitHub Exploit DB Packet Storm
314006 4.7 MEDIUM
Network 		google chrome Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of… NVD-CWE-noinfo
CVE-2024-6995 2024-08-8 05:35 2024-08-7 Show GitHub Exploit DB Packet Storm
314007 - - - An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method. - CVE-2024-41264 2024-08-8 05:35 2024-08-2 Show GitHub Exploit DB Packet Storm
314008 - - - The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin users delete users via CSRF attacks - CVE-2024-2843 2024-08-8 05:35 2024-08-1 Show GitHub Exploit DB Packet Storm
314009 - abarcar abarcar_realty_portal Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid parameter to newsdetails.php, or the (2) slid parameter to sl… CWE-89
SQL Injection 		CVE-2006-5840 2024-08-8 05:15 2006-11-10 Show GitHub Exploit DB Packet Storm
314010 - marc_cagninacci mclinkscounter Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2)… CWE-94
Code Injection 		CVE-2006-4863 2024-08-8 05:15 2006-09-20 Show GitHub Exploit DB Packet Storm