Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231311 7.5 危険 phpmyring - PHPMyRing の cherche.php における SQL インジェクションの脆弱性 - CVE-2006-5638 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
231312 5.1 警告 sws - SWS の common.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5636 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
231313 7.5 危険 web wiz forums - Web Wiz Forums の forum/search.asp における SQL インジェクションの脆弱性 - CVE-2006-5635 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
231314 6.8 警告 phpprofiles - phpProfiles における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5634 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
231315 7.5 危険 unisor cms - UNISOR CMS の login.asp における SQL インジェクションの脆弱性 - CVE-2006-5628 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
231316 7.5 危険 qnecms - QnECMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5627 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
231317 4.3 警告 phpfaber - phpFaber CMS の cms_images/js/htmlarea/htmlarea.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5626 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
231318 7.5 危険 thepeak - Thepeak File Upload Manager の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5617 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
231319 7.5 危険 Textpattern - Textpattern の publish.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5615 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
231320 10 危険 東芝 - Toshiba Bluetooth スタックにおける脆弱性 CWE-noinfo
情報不足 		CVE-2006-5611 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314181 9.8 CRITICAL
Network 		mozilla firefox
firefox_esr 		A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2… CWE-843
Type Confusion 		CVE-2024-8385 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
314182 9.8 CRITICAL
Network 		mozilla firefox_esr
firefox 		The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulner… CWE-787
 Out-of-bounds Write 		CVE-2024-8384 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
314183 9.8 CRITICAL
Network 		mozilla firefox_esr
firefox 		A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < … CWE-843
Type Confusion 		CVE-2024-8381 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
314184 10.0 CRITICAL
Network 		wpindeed ultimate_membership_pro Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro allows Object Injection.This issue affects Ultimate Membership Pro: from n/a through 12.6. CWE-502
 Deserialization of Untrusted Data 		CVE-2024-43242 2024-09-7 01:57 2024-08-20 Show GitHub Exploit DB Packet Storm
314185 7.5 HIGH
Network 		raidenmaild raidenmaild Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server. CWE-22
Path Traversal 		CVE-2024-7693 2024-09-7 01:51 2024-08-12 Show GitHub Exploit DB Packet Storm
314186 - - - H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access… - CVE-2024-45758 2024-09-7 01:46 2024-09-7 Show GitHub Exploit DB Packet Storm
314187 - - - Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. This causes Dovecot to convert single mail with LF DOT LF in middle, into two email… - CVE-2024-25584 2024-09-7 01:46 2024-09-7 Show GitHub Exploit DB Packet Storm
314188 - - - `gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions. Prior to version 0.10.11, `gix-path` runs `git` to find the path of a… - CVE-2024-45405 2024-09-7 01:46 2024-09-6 Show GitHub Exploit DB Packet Storm
314189 - - - Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manage_user&id=. - CVE-2024-44739 2024-09-7 01:46 2024-09-6 Show GitHub Exploit DB Packet Storm
314190 8.8 HIGH
Network 		ibm webmethods_integration IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication. NVD-CWE-Other
CVE-2024-45075 2024-09-7 01:45 2024-09-5 Show GitHub Exploit DB Packet Storm