Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247991 10 危険 bitflux - Bitflux Upload Progress Meter の uploadprogress_php_rfc1867_file 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-6361 2012-06-26 15:38 2006-12-7 Show GitHub Exploit DB Packet Storm
247992 10 危険 duware - DuWare DuClassmate の default.asp における SQL インジェクションの脆弱性 - CVE-2006-6355 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
247993 7.5 危険 duware - DuWare DuNews の detail.asp における SQL インジェクションの脆弱性 - CVE-2006-6354 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
247994 5 警告 アップル - Mac OS X の BOMArchiveHelper におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6353 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
247995 5 警告 frisk software - FRISK Software F-Prot Antivirus におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6352 2012-06-26 15:38 2006-12-1 Show GitHub Exploit DB Packet Storm
247996 6.8 警告 deV!L'z Clanportal - DZCP の sites/index.php における SQL インジェクションの脆弱性 - CVE-2006-6339 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
247997 5 警告 deV!L'z Clanportal - DZCP の upload/index.php における任意の .php ファイルをアップロードおよび実行される脆弱性 - CVE-2006-6338 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
247998 7.5 危険 ASP indir - Aspee Ziyaretci Defteri の giris.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-6337 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
247999 10 危険 ライブドア - Eudora WorldMail の MAILMA.exe におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-6336 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
248000 6.8 警告 シトリックス・システムズ - Citrix Presentation Server Client の SendChannelData 関数におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-6334 2012-06-26 15:38 2006-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314631 5.4 MEDIUM
Network 		sulu sulu Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the “Media” section can upload an SVG file with a malicious payload. Once uploaded… CWE-79
Cross-site Scripting 		CVE-2024-47618 2024-10-8 23:31 2024-10-4 Show GitHub Exploit DB Packet Storm
314632 7.2 HIGH
Network 		cisco unified_computing_system A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative privileges to pe… CWE-77
Command Injection 		CVE-2024-20365 2024-10-8 23:28 2024-10-3 Show GitHub Exploit DB Packet Storm
314633 6.1 MEDIUM
Network 		sulu sulu Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle comp… CWE-79
Cross-site Scripting 		CVE-2024-47617 2024-10-8 23:23 2024-10-4 Show GitHub Exploit DB Packet Storm
314634 5.9 MEDIUM
Network 		cisco nexus_dashboard_orchestrator A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device.&n… CWE-295
Improper Certificate Validation  		CVE-2024-20385 2024-10-8 23:22 2024-10-3 Show GitHub Exploit DB Packet Storm
314635 7.5 HIGH
Network 		hypestudio social_web_suite The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log fu… CWE-22
Path Traversal 		CVE-2024-8352 2024-10-8 23:17 2024-10-3 Show GitHub Exploit DB Packet Storm
314636 8.8 HIGH
Network 		cisco nexus_dashboard_fabric_controller A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack agains… CWE-77
Command Injection 		CVE-2024-20432 2024-10-8 23:10 2024-10-3 Show GitHub Exploit DB Packet Storm
314637 5.4 MEDIUM
Network 		cisco nexus_dashboard
nexus_dashboard_fabric_controller 		A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device. This vulnerability exists becaus… CWE-862
 Missing Authorization 		CVE-2024-20438 2024-10-8 22:54 2024-10-3 Show GitHub Exploit DB Packet Storm
314638 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20521 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
314639 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20520 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
314640 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20519 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm