Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230981 6.8 警告 PHPNUKE - PHP-Nuke 用の MyHeadlines モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4563 2012-12-20 18:02 2006-09-5 Show GitHub Exploit DB Packet Storm
230982 7.5 危険 retro64 - Retro64 / Miniclip CR64Loader ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2006-4555 2012-12-20 18:02 2006-09-5 Show GitHub Exploit DB Packet Storm
230983 7.5 危険 Plume CMS - Plume CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4533 2012-12-20 18:02 2006-09-1 Show GitHub Exploit DB Packet Storm
230984 5 警告 qbik - Qbik WinGate におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4518 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
230985 4 警告 The Tor Project
scatterchat		 - Tor および ScatterChatどにおける任意の Tor トラフィックをルーティングされる脆弱性 - CVE-2006-4508 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
230986 4.6 警告 ソニー・コンピュータエンタテインメント - PSP の Photo Viewer の libTIFF における任意のコードを実行される脆弱性 - CVE-2006-4507 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
230987 7.5 危険 ztml - ezPortal/ztml CMS における認証コントロールを回避される脆弱性 - CVE-2006-4502 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
230988 7.5 危険 ztml - ezPortal/ztml CMS の index.php における SQL インジェクションの脆弱性 - CVE-2006-4501 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
230989 4.3 警告 ztml - ezPortal/ztml CMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4500 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
230990 7.5 危険 phpalbum.net - PortailPHP 用の PhpAlbum における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4498 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314501 - - - The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attack… CWE-20
 Improper Input Validation  		CVE-2024-40720 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314502 6.5 MEDIUM
Network 		- - The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious web… CWE-326
Inadequate Encryption Strength 		CVE-2024-40719 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314503 - - - Soft Serve is a self-hostable Git server for the command line. Prior to 0.7.5, it is possible for a user who can commit files to a repository hosted by Soft Serve to execute arbitrary code via enviro… - CVE-2024-41956 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314504 - - - biscuit-rust is the Rust implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token… - CVE-2024-41949 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314505 - - - biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token… - CVE-2024-41948 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314506 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack E… CWE-79
Cross-site Scripting 		CVE-2024-39667 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314507 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in YMC Filter & Grids allows Stored XSS.This issue affects Filter & Grids: from n/a through 2… CWE-79
Cross-site Scripting 		CVE-2024-39665 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314508 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black W… CWE-79
Cross-site Scripting 		CVE-2024-39662 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314509 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ExtendThemes Kubio AI Page Builder.This issue affects Kubio AI Page Builder: from n/a thro… - CVE-2024-39661 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm
314510 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a throug… CWE-79
Cross-site Scripting 		CVE-2024-39660 2024-08-2 21:59 2024-08-2 Show GitHub Exploit DB Packet Storm