Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248121	10	危険	E-Xoopport	-	E-Xoopport における詳細不明な脆弱性	-	CVE-2006-5978	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248122	7.5	危険	Expinion.net	-	MultiCalendars における SQL インジェクションの脆弱性	-	CVE-2006-5977	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248123	7.5	危険	drumster	-	BlogMe の admin_login.asp における SQL インジェクションの脆弱性	-	CVE-2006-5976	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248124	6.8	警告	drumster	-	BlogMe の comments.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5975	2012-06-26 15:37	2006-11-20	Show	GitHub Exploit DB Packet Storm

248125	7.8	危険	Fetchmail Project	-	fetchmail におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2006-5974	2012-06-26 15:37	2006-12-31	Show	GitHub Exploit DB Packet Storm

248126	4.6	警告	fvwm	-	fvwm の evalFolderLine 関数における CRLF インジェクションの脆弱性	-	CVE-2006-5969	2012-06-26 15:37	2006-11-17	Show	GitHub Exploit DB Packet Storm

248127	4.6	警告	Alt-N	-	MDaemon における任意のコードを実行される脆弱性	-	CVE-2006-5968	2012-06-26 15:37	2006-11-17	Show	GitHub Exploit DB Packet Storm

248128	7.5	危険	20 20 applications	-	20/20 DataShed の listings.asp における SQL インジェクションの脆弱性	-	CVE-2006-5955	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

248129	7.5	危険	asp smiley	-	ASP Smiley の admin/default.asp における SQL インジェクションの脆弱性	-	CVE-2006-5952	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

248130	7.5	危険	exophpdesk	-	Exophpdesk の pipe.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5951	2012-06-26 15:37	2006-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314051	7.2	HIGH Network	ivanti	endpoint_manager_cloud_services_appliance	Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.	CWE-22 Path Traversal	CVE-2024-9381	2024-10-16 22:30	2024-10-9	Show	GitHub Exploit DB Packet Storm

314052	7.5	HIGH Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information	CWE-22 Path Traversal	CVE-2024-47011	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

314053	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47010	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

314054	8.8	HIGH Network	adobe	commerce magento commerce_b2b	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged a…	NVD-CWE-noinfo	CVE-2024-45148	2024-10-16 22:27	2024-10-10	Show	GitHub Exploit DB Packet Storm

314055	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47009	2024-10-16 22:26	2024-10-9	Show	GitHub Exploit DB Packet Storm

314056	7.5	HIGH Network	ivanti	avalanche	Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47008	2024-10-16 22:24	2024-10-9	Show	GitHub Exploit DB Packet Storm

314057	7.5	HIGH Network	ivanti	avalanche	A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.	CWE-476 NULL Pointer Dereference	CVE-2024-47007	2024-10-16 22:23	2024-10-9	Show	GitHub Exploit DB Packet Storm

314058	6.7	MEDIUM Local	microsoft	windows_server_2012 windows_10_1507 windows_server_2016 windows_server_2022_23h2 windows_10_1809 windows_server_2022 windows_11_21h2 windows_10_21h2 windows_10_22h2 windows…	Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability	NVD-CWE-noinfo	CVE-2024-37983	2024-10-16 22:15	2024-10-9	Show	GitHub Exploit DB Packet Storm

314059	9.8	CRITICAL Network	alisonic	sibylla_firmware	Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database.	CWE-89 SQL Injection	CVE-2024-8630	2024-10-16 22:15	2024-09-28	Show	GitHub Exploit DB Packet Storm

314060	7.5	HIGH Network	opentext	cx-e_voice	Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system.	CWE-22 Path Traversal	CVE-2023-7260	2024-10-16 21:53	2024-08-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed