Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231161	9.3	危険	quinnware	-	Quintessential Player におけるバッファオーバーフローの脆弱性	-	CVE-2006-6261	2012-12-20 18:02	2006-12-4	Show	GitHub Exploit DB Packet Storm

231162	7.5	危険	redbinaria	-	Redbinaria SIAP の login.asp における SQL インジェクションの脆弱性	-	CVE-2006-6260	2012-12-20 18:02	2006-12-4	Show	GitHub Exploit DB Packet Storm

231163	7.5	危険	vuplayer	-	VUPlayer におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-6251	2012-12-20 18:02	2006-12-4	Show	GitHub Exploit DB Packet Storm

231164	7.8	危険	songbird	-	Songbird Media Player におけるフォーマットストリングの脆弱性	-	CVE-2006-6250	2012-12-20 18:02	2006-12-4	Show	GitHub Exploit DB Packet Storm

231165	7.5	危険	uapplication	-	Uapplication UPhotoGallery における SQL インジェクションの脆弱性	-	CVE-2006-6247	2012-12-20 18:02	2006-12-4	Show	GitHub Exploit DB Packet Storm

231166	6.8	警告	s9y	-	Serendipity におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2006-6242	2012-12-20 18:02	2006-12-3	Show	GitHub Exploit DB Packet Storm

231167	4	警告	telnet ftp server	-	Sorin Chitu Telnet-FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2006-6241	2012-12-20 18:02	2006-12-3	Show	GitHub Exploit DB Packet Storm

231168	4	警告	telnet ftp server	-	Sorin Chitu Telnet-FTP Server におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6240	2012-12-20 18:02	2006-12-3	Show	GitHub Exploit DB Packet Storm

231169	7.5	危険	woltlab	-	Woltlab Burning Board Lite の thread.php における SQL インジェクションの脆弱性	-	CVE-2006-6237	2012-12-20 18:02	2006-12-3	Show	GitHub Exploit DB Packet Storm

231170	7.5	危険	postnuke software foundation	-	PostNuke の Downloads モジュールにおける SQL インジェクションの脆弱性	-	CVE-2006-6233	2012-12-20 18:02	2006-12-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315261	8.8	HIGH Network	siamonhasan	warehouse_inventory_system	A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	CWE-352 Origin Validation Error	CVE-2024-42580	2024-08-21 22:39	2024-08-20	Show	GitHub Exploit DB Packet Storm

315262	8.8	HIGH Network	siamonhasan	warehouse_inventory_system	A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	CWE-352 Origin Validation Error	CVE-2024-42583	2024-08-21 22:38	2024-08-20	Show	GitHub Exploit DB Packet Storm

315263	8.8	HIGH Network	siamonhasan	warehouse_inventory_system	A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	CWE-352 Origin Validation Error	CVE-2024-42582	2024-08-21 22:38	2024-08-20	Show	GitHub Exploit DB Packet Storm

315264	8.8	HIGH Network	siamonhasan	warehouse_inventory_system	A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	CWE-352 Origin Validation Error	CVE-2024-42581	2024-08-21 22:38	2024-08-20	Show	GitHub Exploit DB Packet Storm

315265	8.8	HIGH Network	siamonhasan	warehouse_inventory_system	A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.	CWE-352 Origin Validation Error	CVE-2024-42584	2024-08-21 22:37	2024-08-20	Show	GitHub Exploit DB Packet Storm

315266	5.4	MEDIUM Network	friendica	friendica	Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.	CWE-79 Cross-site Scripting	CVE-2024-39094	2024-08-21 22:31	2024-08-20	Show	GitHub Exploit DB Packet Storm

315267	7.5	HIGH Network	keyfactor	command	Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information disclosure.	CWE-89 SQL Injection	CVE-2024-34458	2024-08-21 22:31	2024-08-20	Show	GitHub Exploit DB Packet Storm

315268	7.5	HIGH Network	keyfactor	aws_orchestrator	Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.	NVD-CWE-noinfo	CVE-2024-42006	2024-08-21 22:26	2024-08-20	Show	GitHub Exploit DB Packet Storm

315269	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall	CWE-352 Origin Validation Error	CVE-2024-42603	2024-08-21 22:21	2024-08-21	Show	GitHub Exploit DB Packet Storm

315270	8.8	HIGH Network	pligg	pligg_cms	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars	CWE-352 Origin Validation Error	CVE-2024-42609	2024-08-21 22:12	2024-08-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed