Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248251 7.5 危険 fusionphp - Fusion News における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4240 2012-06-26 15:37 2006-08-21 Show GitHub Exploit DB Packet Storm
248252 7.5 危険 dotProject - dotProject の classes/query.class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4234 2012-06-26 15:37 2006-08-18 Show GitHub Exploit DB Packet Storm
248253 7.5 危険 david kent norman - David Kent Norman Thatware の config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4213 2012-06-26 15:37 2006-08-17 Show GitHub Exploit DB Packet Storm
248254 2.6 注意 andreas kansok - Andreas Kansok phPay の nu_mail.inc.php におけるサーバをオープンメール中継に使用される脆弱性 - CVE-2006-4210 2012-06-26 15:37 2006-08-17 Show GitHub Exploit DB Packet Storm
248255 7.5 危険 bob jewell - Bob Jewell Discloser における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4207 2012-06-26 15:37 2006-08-17 Show GitHub Exploit DB Packet Storm
248256 4.3 警告 aspplayground.net - ASPPlayground.NET Forum Advanced Edition Unicode の calendar.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4206 2012-06-26 15:37 2006-08-17 Show GitHub Exploit DB Packet Storm
248257 5.1 警告 BoonEx - Dolphin における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4189 2012-06-26 15:37 2006-08-16 Show GitHub Exploit DB Packet Storm
248258 7.5 危険 ClamAV - ClamAV における整数オーバーフローの脆弱性 - CVE-2006-4182 2012-06-26 15:37 2006-10-16 Show GitHub Exploit DB Packet Storm
248259 10 危険 GNU Project - GNU Radius の radiusd におけるフォーマットストリングの脆弱性 - CVE-2006-4181 2012-06-26 15:37 2006-11-27 Show GitHub Exploit DB Packet Storm
248260 4.9 警告 FreeBSD - FreeBSD の i386_set_ldt 呼び出しにおける整数符号化エラーの脆弱性 - CVE-2006-4178 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314521 5.4 MEDIUM
Network 		xjd2020 fastcms A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross sit… CWE-79
Cross-site Scripting 		CVE-2024-7733 2024-09-13 01:20 2024-08-14 Show GitHub Exploit DB Packet Storm
314522 5.4 MEDIUM
Network 		deathbreak drug A cross-site scripting (XSS) vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user para… CWE-79
Cross-site Scripting 		CVE-2024-44837 2024-09-13 01:17 2024-09-6 Show GitHub Exploit DB Packet Storm
314523 7.5 HIGH
Network 		dataflowx datadiodex Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DataFlowX Technology DataDiodeX allows Path Traversal.This issue affects DataDiodeX: from v3.0.0 before… CWE-22
Path Traversal 		CVE-2024-6445 2024-09-13 01:14 2024-09-6 Show GitHub Exploit DB Packet Storm
314524 9.8 CRITICAL
Network 		dlink di-8100g_firmware D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgrade_filter.asp file CWE-77
Command Injection 		CVE-2024-44401 2024-09-13 01:09 2024-09-7 Show GitHub Exploit DB Packet Storm
314525 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() Fix a use-after-free that occurs in hcd when in_urb sent from… CWE-416
 Use After Free 		CVE-2023-52907 2024-09-13 01:06 2024-08-21 Show GitHub Exploit DB Packet Storm
314526 9.1 CRITICAL
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Several endpoints in versions prior to 4.2.1 of the CometVisu add-on of openHAB … CWE-862
 Missing Authorization 		CVE-2024-42470 2024-09-13 01:04 2024-08-12 Show GitHub Exploit DB Packet Storm
314527 9.8 CRITICAL
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Prior to version 4.2.1, CometVisu's file system endpoints don't require authenti… CWE-22
Path Traversal 		CVE-2024-42469 2024-09-13 01:02 2024-08-12 Show GitHub Exploit DB Packet Storm
314528 7.5 HIGH
Network 		openhab openhab openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to 4.2.1 is susceptible to an unauthenticated… CWE-22
Path Traversal 		CVE-2024-42468 2024-09-13 01:01 2024-08-12 Show GitHub Exploit DB Packet Storm
314529 6.1 MEDIUM
Network 		hyperview geoportal_toolkit HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unauthenticated attacker might trick somebody into using a crafted URL, which will c… CWE-79
Cross-site Scripting 		CVE-2024-6450 2024-09-13 00:42 2024-08-28 Show GitHub Exploit DB Packet Storm
314530 - data_general
sgi
sun
hp
debian
ibm
bsdi 		dg_ux
irix
sunos
hp-ux
debian_linux
solaris
aix
bsd_os 		Buffer overflow in xlock program allows local users to execute commands as root. NVD-CWE-Other
CVE-1999-0038 2024-09-13 00:35 1997-04-26 Show GitHub Exploit DB Packet Storm