Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231391 7.8 危険 phplibre - registroTL におけるデータベースをダウンロードされる脆弱性 - CVE-2006-5316 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
231392 6.8 警告 phpBB - phpBB 用の Journals System モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5306 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
231393 5.1 警告 phpBB - lat2cyr および phpbb の lat2cyr.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5305 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
231394 2.1 注意 securecomputing - Secure Computing SafeWord RemoteAccess における UserCenter Web ポータルパスワードなどを取得される脆弱性 - CVE-2006-5303 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
231395 7.5 危険 redaction system - Redaction System における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5302 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
231396 6.8 警告 phpBB - phpBB 用の SpamBlockerMODv モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5301 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
231397 4.3 警告 Tincan - phplist の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5294 2012-12-20 18:02 2006-10-16 Show GitHub Exploit DB Packet Storm
231398 6.8 警告 phpoutsourcing - PhpOutsourcing Noah's Classifieds の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5293 2012-12-20 18:02 2006-10-16 Show GitHub Exploit DB Packet Storm
231399 7.5 危険 Xerox - Xerox WorkCentre における認証を回避される脆弱性 - CVE-2006-5290 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
231400 7.5 危険 Vtiger - Vtiger CRM における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5289 2012-12-20 18:02 2006-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314551 9.6 CRITICAL
Network 		vtiger vtiger_crm A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via … CWE-79
Cross-site Scripting 		CVE-2024-44779 2024-09-4 03:33 2024-08-30 Show GitHub Exploit DB Packet Storm
314552 9.6 CRITICAL
Network 		vtiger vtiger_crm A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injec… CWE-79
Cross-site Scripting 		CVE-2024-44777 2024-09-4 03:33 2024-08-30 Show GitHub Exploit DB Packet Storm
314553 6.1 MEDIUM
Network 		vtiger vtiger_crm An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL. CWE-601
Open Redirect 		CVE-2024-44776 2024-09-4 03:33 2024-08-30 Show GitHub Exploit DB Packet Storm
314554 6.1 MEDIUM
Network 		dedebiz dedebiz A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting 		CVE-2024-44717 2024-09-4 03:32 2024-08-30 Show GitHub Exploit DB Packet Storm
314555 6.1 MEDIUM
Network 		dedebiz dedebiz A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting 		CVE-2024-44716 2024-09-4 03:32 2024-08-30 Show GitHub Exploit DB Packet Storm
314556 5.4 MEDIUM
Network 		dsgvo-for-wp dsgvo_all_in_one_for_wp Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in… CWE-79
Cross-site Scripting 		CVE-2024-43964 2024-09-4 03:30 2024-08-30 Show GitHub Exploit DB Packet Storm
314557 5.4 MEDIUM
Network 		khoj khoj Khoj is an application that creates personal AI agents. The Automation feature allows a user to insert arbitrary HTML inside the task instructions, resulting in a Stored XSS. The q parameter for the … CWE-79
Cross-site Scripting 		CVE-2024-43396 2024-09-4 03:19 2024-08-21 Show GitHub Exploit DB Packet Storm
314558 - - - Rejected reason: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evide… - CVE-2024-7619 2024-09-4 03:15 2024-09-4 Show GitHub Exploit DB Packet Storm
314559 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() If IORESOURCE_MEM is not provided … CWE-476
 NULL Pointer Dereference 		CVE-2024-43823 2024-09-4 02:49 2024-08-17 Show GitHub Exploit DB Packet Storm
314560 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe() The value “-ENOMEM” was assigned to the loc… CWE-476
 NULL Pointer Dereference 		CVE-2024-43822 2024-09-4 02:49 2024-08-17 Show GitHub Exploit DB Packet Storm