Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248031 7.5 危険 activecampaign - ActiveCampaign KnowledgeBuilder の admin/e_data/visEdit_control.class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5919 2012-06-26 15:37 2006-11-15 Show GitHub Exploit DB Packet Storm
248032 10 危険 campware.org - Campware Campsite における詳細不明な脆弱性 - CVE-2006-5912 2012-06-26 15:37 2006-11-15 Show GitHub Exploit DB Packet Storm
248033 7.5 危険 campware.org - Campware Campsite における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5911 2012-06-26 15:37 2006-11-15 Show GitHub Exploit DB Packet Storm
248034 7.5 危険 campware.org - Campware Campsite における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5910 2012-06-26 15:37 2006-11-15 Show GitHub Exploit DB Packet Storm
248035 7.5 危険 encapscms - EncapsCMS の core/core.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5895 2012-06-26 15:37 2006-11-14 Show GitHub Exploit DB Packet Storm
248036 7.5 危険 brewblogger - BB の printLog.php における SQL インジェクションの脆弱性 - CVE-2006-5889 2012-06-26 15:37 2006-11-14 Show GitHub Exploit DB Packet Storm
248037 7.5 危険 dynamic dataworx - Dynamic Dataworx NuSchool の CampusNewsDetails.asp における SQL インジェクションの脆弱性 - CVE-2006-5887 2012-06-26 15:37 2006-11-14 Show GitHub Exploit DB Packet Storm
248038 7.8 危険 The Enigmail Project - enigmail 拡張機能におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5877 2012-06-26 15:37 2007-02-23 Show GitHub Exploit DB Packet Storm
248039 7.5 危険 dynamic dataworx - NuRems の propertysdetails.asp における SQL インジェクションの脆弱性 - CVE-2006-5886 2012-06-26 15:37 2006-11-14 Show GitHub Exploit DB Packet Storm
248040 7.5 危険 dynamic dataworx - NuStore の Products.asp における SQL インジェクションの脆弱性 - CVE-2006-5885 2012-06-26 15:37 2006-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314371 - - - Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation - CVE-2024-9333 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314372 - - - Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI - CVE-2024-9174 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314373 - - - The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to… - CVE-2024-7315 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314374 8.8 HIGH
Network 		- - The WP Hotel Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_review() function in all versions up to, and including, 2.1.2. This… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7855 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314375 - - - FileSender before 2.49 allows server-side template injection (SSTI) for retrieving credentials. - CVE-2024-45186 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314376 - - - Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function. - CVE-2024-33662 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314377 - - - Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions are sequentially called. An attacker can generate the … - CVE-2024-21530 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314378 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulnerability in the "Alert Templates" feature allows users to inject arbitrary Java… CWE-79
Cross-site Scripting 		CVE-2024-47526 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314379 - - - LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can create a Device Groups, the application did not properly sanitize the user input in the Device Gro… - CVE-2024-47524 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm
314380 - - - Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function. - CVE-2024-46084 2024-10-4 22:50 2024-10-2 Show GitHub Exploit DB Packet Storm