Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231021	6.8	警告	sh-news	-	SH-News の misc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6801	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

231022	7.5	危険	The Cacti Group	-	Cacti における SQL インジェクションの脆弱性	-	CVE-2006-6799	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

231023	7.5	危険	PHP Outburst	-	UPB の chat/login.php における任意の PHP コードを挿入される脆弱性	-	CVE-2006-6790	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

231024	7.5	危険	phpbbxtra	-	Phpbbxtra の includes/archive/archive_topic.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6789	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

231025	6.8	警告	timberwolf	-	TimberWolf の shownews.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6778	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

231026	9.3	危険	w3m project	-	w3m の file.c におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2006-6772	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

231027	6.8	警告	pwp technologies	-	PWP Technologies The Classified Ad System の default.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6768	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

231028	7.5	危険	phpmymanga	-	Phpmymanga の template.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-6760	2012-12-20 18:02	2006-12-26	Show	GitHub Exploit DB Packet Storm

231029	2.1	注意	phpprofiles	-	phpProfiles におけるディレクトリコンテンツをリスト化される脆弱性	-	CVE-2006-6744	2012-12-20 18:02	2006-12-26	Show	GitHub Exploit DB Packet Storm

231030	4.6	警告	phpprofiles	-	phpProfiles におけるファイルを削除される脆弱性	-	CVE-2006-6743	2012-12-20 18:02	2006-12-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313941	6.1	MEDIUM Network	zoneminder	zoneminder	ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the filter view via the filter[Id]. This vulnerability is fixe…	CWE-79 Cross-site Scripting	CVE-2024-43358	2024-09-5 06:41	2024-08-13	Show	GitHub Exploit DB Packet Storm

313942	6.5	MEDIUM Network	zoom	rooms_controller rooms meeting_software_development_kit workplace_virtual_desktop_infrastructure workplace_desktop workplace	Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.	CWE-787 Out-of-bounds Write	CVE-2024-42437	2024-09-5 06:39	2024-08-15	Show	GitHub Exploit DB Packet Storm

313943	6.5	MEDIUM Network	zoom	rooms_controller rooms meeting_software_development_kit workplace_virtual_desktop_infrastructure workplace_desktop workplace	Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.	CWE-787 Out-of-bounds Write	CVE-2024-42436	2024-09-5 06:38	2024-08-15	Show	GitHub Exploit DB Packet Storm

313944	4.9	MEDIUM Network	zoom	rooms_controller rooms meeting_software_development_kit workplace_virtual_desktop_infrastructure workplace_desktop workplace	Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.	NVD-CWE-noinfo	CVE-2024-42435	2024-09-5 06:36	2024-08-15	Show	GitHub Exploit DB Packet Storm

313945	4.9	MEDIUM Network	zoom	rooms_controller rooms meeting_software_development_kit workplace_virtual_desktop_infrastructure workplace_desktop workplace	Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.	NVD-CWE-noinfo	CVE-2024-42434	2024-09-5 06:35	2024-08-15	Show	GitHub Exploit DB Packet Storm

313946	8.5	HIGH Network	zoom	workplace workplace_desktop workplace_virtual_desktop_infrastructure rooms	Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.	CWE-787 Out-of-bounds Write	CVE-2024-39825	2024-09-5 06:34	2024-08-15	Show	GitHub Exploit DB Packet Storm

313947	4.9	MEDIUM Network	zoom	rooms_controller rooms meeting_software_development_kit workplace_virtual_desktop_infrastructure workplace_desktop workplace	Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.	NVD-CWE-noinfo	CVE-2024-39824	2024-09-5 06:32	2024-08-15	Show	GitHub Exploit DB Packet Storm

313948	4.9	MEDIUM Network	zoom	rooms_controller rooms meeting_software_development_kit workplace_virtual_desktop_infrastructure workplace_desktop workplace	Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.	NVD-CWE-noinfo	CVE-2024-39823	2024-09-5 06:30	2024-08-15	Show	GitHub Exploit DB Packet Storm

313949	6.5	MEDIUM Network	zoom	rooms_controller rooms meeting_software_development_kit workplace workplace_desktop	Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.	NVD-CWE-noinfo	CVE-2024-39822	2024-09-5 06:28	2024-08-15	Show	GitHub Exploit DB Packet Storm

313950	7.8	HIGH Local	-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36540.	-	CVE-2023-34122	2024-09-5 04:15	2023-06-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed