Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230881 7.5 危険 trawler - Trawler Web CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5495 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230882 7.5 危険 PHPNUKE - PHP-Nuke 用の pandaBB モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5494 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230883 5 警告 BlackBerry - IBM Lotus Domino 用の RIM BlackBerry Enterprise Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5489 2012-12-20 18:02 2006-10-6 Show GitHub Exploit DB Packet Storm
230884 7.5 危険 xchangeboard - XchangeBoard における SQL インジェクションの脆弱性 - CVE-2006-5488 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230885 4.3 警告 サン・マイクロシステムズ - Sun Java System Messaging Server および iPlanet Messaging Server の Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-5486 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230886 7.5 危険 speedberg - SpeedBerg における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5485 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230887 5 警告 SSH コミュニケーションズ・セキュリティ - SSH Tectia Client/Server/Connector などの製品における RSA 鍵で署名済みの PKCS #1 署名を偽装される脆弱性 - CVE-2006-5484 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230888 7.5 危険 softerra - Softerra PHP Developer Library における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5472 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230889 7.5 危険 softerra - Softerra PHP Developer Library の example/lib/grid3.lib.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5471 2012-12-20 18:02 2006-10-24 Show GitHub Exploit DB Packet Storm
230890 5.4 警告 RPM
Canonical		 - RPM Package Manager の librpm におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-5466 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314041 5.9 MEDIUM
Network 		ibm sterling_connect_direct_web_services IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.… CWE-311
Missing Encryption of Sensitive Data 		CVE-2024-39746 2024-08-24 00:25 2024-08-22 Show GitHub Exploit DB Packet Storm
314042 7.5 HIGH
Network 		ibm sterling_connect_direct_web_services IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-39745 2024-08-24 00:25 2024-08-22 Show GitHub Exploit DB Packet Storm
314043 4.3 MEDIUM
Network 		ibm sterling_connect_direct_web_services IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted fro… CWE-352
 Origin Validation Error 		CVE-2024-39744 2024-08-24 00:25 2024-08-22 Show GitHub Exploit DB Packet Storm
314044 5.3 MEDIUM
Network 		youdiancms youdiancms A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to informati… NVD-CWE-noinfo
CVE-2024-7328 2024-08-24 00:25 2024-08-1 Show GitHub Exploit DB Packet Storm
314045 5.4 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due… CWE-79
Cross-site Scripting 		CVE-2024-20443 2024-08-24 00:18 2024-08-8 Show GitHub Exploit DB Packet Storm
314046 4.8 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due… CWE-79
Cross-site Scripting 		CVE-2024-20479 2024-08-24 00:14 2024-08-8 Show GitHub Exploit DB Packet Storm
314047 5.3 MEDIUM
Network 		hp instantos Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results… NVD-CWE-noinfo
CVE-2024-42396 2024-08-24 00:07 2024-08-7 Show GitHub Exploit DB Packet Storm
314048 5.3 MEDIUM
Network 		arubanetworks
hp 		arubaos
instantos 		Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to… NVD-CWE-noinfo
CVE-2024-42400 2024-08-24 00:06 2024-08-7 Show GitHub Exploit DB Packet Storm
314049 5.3 MEDIUM
Network 		arubanetworks
hp 		arubaos
instantos 		Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to… NVD-CWE-noinfo
CVE-2024-42399 2024-08-24 00:06 2024-08-7 Show GitHub Exploit DB Packet Storm
314050 5.3 MEDIUM
Network 		arubanetworks
hp 		arubaos
instantos 		Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to… NVD-CWE-noinfo
CVE-2024-42398 2024-08-24 00:06 2024-08-7 Show GitHub Exploit DB Packet Storm