Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231371	7.5	危険	university of glasgow	-	University of Glasgow SID の client.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5419	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

231372	6.8	警告	phpBB	-	phpBB 用の SearchIndexer の pbpbb アーカイブにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5418	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

231373	7.5	危険	supermod	-	YaBBSM 用の SuperMod における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5413	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

231374	6.2	警告	東芝	-	複数製品に使用される Toshiba Bluetooth ワイアレスデバイスドライバにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5405	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231375	2.6	注意	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおける重要な情報を取得される脆弱性	-	CVE-2006-5404	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

231376	5.1	警告	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-5403	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

231377	7.5	危険	phpmybibli	-	PHPmybibli における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5402	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231378	7.5	危険	phprecipebook	-	PHPRecipeBook の classes/Import_MM.class.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5399	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231379	7.5	危険	simplog	-	Simplog の comments.php における SQL インジェクションの脆弱性	-	CVE-2006-5398	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231380	2.1	注意	X.Org Foundation	-	X.Org libX11 の Xinput モジュールにおける XCOMPOSEFILE 環境変数によって使用されるファイルが読み込まれる脆弱性	-	CVE-2006-5397	2012-12-20 18:02	2006-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314491	7.5	HIGH Network	tenda	fh1206_firmware	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the modino parameter in the fromPptpUserAdd function. This vulnerability allows attackers to cause a Denial of Service (DoS) v…	CWE-787 Out-of-bounds Write	CVE-2024-42987	2024-09-4 03:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

314492	9.8	CRITICAL Network	tenda	fh1206_firmware	An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.	NVD-CWE-noinfo	CVE-2024-42978	2024-09-4 03:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

314493	7.5	HIGH Network	tenda	fh1201_firmware	Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (…	CWE-787 Out-of-bounds Write	CVE-2024-42948	2024-09-4 03:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

314494	9.6	CRITICAL Network	vtiger	vtiger_crm	A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via in…	CWE-79 Cross-site Scripting	CVE-2024-44778	2024-09-4 03:34	2024-08-30	Show	GitHub Exploit DB Packet Storm

314495	9.6	CRITICAL Network	vtiger	vtiger_crm	A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via …	CWE-79 Cross-site Scripting	CVE-2024-44779	2024-09-4 03:33	2024-08-30	Show	GitHub Exploit DB Packet Storm

314496	9.6	CRITICAL Network	vtiger	vtiger_crm	A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injec…	CWE-79 Cross-site Scripting	CVE-2024-44777	2024-09-4 03:33	2024-08-30	Show	GitHub Exploit DB Packet Storm

314497	6.1	MEDIUM Network	vtiger	vtiger_crm	An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL.	CWE-601 Open Redirect	CVE-2024-44776	2024-09-4 03:33	2024-08-30	Show	GitHub Exploit DB Packet Storm

314498	6.1	MEDIUM Network	dedebiz	dedebiz	A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.	CWE-79 Cross-site Scripting	CVE-2024-44717	2024-09-4 03:32	2024-08-30	Show	GitHub Exploit DB Packet Storm

314499	6.1	MEDIUM Network	dedebiz	dedebiz	A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.	CWE-79 Cross-site Scripting	CVE-2024-44716	2024-09-4 03:32	2024-08-30	Show	GitHub Exploit DB Packet Storm

314500	5.4	MEDIUM Network	dsgvo-for-wp	dsgvo_all_in_one_for_wp	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in…	CWE-79 Cross-site Scripting	CVE-2024-43964	2024-09-4 03:30	2024-08-30	Show	GitHub Exploit DB Packet Storm