Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248311 7.5 危険 ciamos - Ciamos CMS の modules/forum/include/config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5257 2012-06-26 15:37 2006-10-12 Show GitHub Exploit DB Packet Storm
248312 7.5 危険 Claroline Consortium - Claroline の claroline/inc/lib/import.lib.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5256 2012-06-26 15:37 2006-10-12 Show GitHub Exploit DB Packet Storm
248313 7.5 危険 dayana networks - Dayana Networks phpOnline の strload.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5253 2012-06-26 15:37 2006-10-12 Show GitHub Exploit DB Packet Storm
248314 7.5 危険 deep cms - Deep CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5251 2012-06-26 15:37 2006-10-12 Show GitHub Exploit DB Packet Storm
248315 5.1 警告 blueshoes - BlueShoes の lib/googlesearch/GoogleSearch.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5250 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
248316 7.8 危険 eazy cart - Eazy Cart における顧客データベースをダウンロードされる脆弱性 - CVE-2006-5248 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
248317 6.8 警告 eazy cart - Eazy Cart におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5247 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
248318 5 警告 eazy cart - Eazy Cart における価格および他の重要なフィールドを変更される脆弱性 - CVE-2006-5246 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
248319 7.5 危険 eazy cart - Eazy Cart における管理アクセス権を取得される脆弱性 - CVE-2006-5245 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
248320 7.5 危険 Etomite Project - Etomite CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-5242 2012-06-26 15:37 2006-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313811 4.3 MEDIUM
Network
mattermost mattermost_server Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.0, 9.8.x <= 9.8.2 fail to enforce permissions which allows a guest user with read access to upload files to a channel. NVD-CWE-noinfo
CVE-2024-43780 2024-10-17 05:07 2024-08-23 Show GitHub Exploit DB Packet Storm
313812 6.7 MEDIUM
Local
qualcomm wsa8835_firmware
wsa8830_firmware
wcn3988_firmware
wcn3980_firmware
wcd9380_firmware
sw5100p_firmware
sw5100_firmware
snapdragon_w5\+_gen_1_wearable_platform_firmware
snapdrag…
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call. CWE-416
 Use After Free
CVE-2024-23376 2024-10-17 05:07 2024-10-7 Show GitHub Exploit DB Packet Storm
313813 4.9 MEDIUM
Network
mattermost mattermost_server Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams … NVD-CWE-noinfo
CVE-2024-42497 2024-10-17 05:05 2024-08-23 Show GitHub Exploit DB Packet Storm
313814 8.8 HIGH
Network
tenda o6_firmware A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the function fromVirtualSet of the file /goform/setPortForward. The manipulation of the argument ip/localP… CWE-787
 Out-of-bounds Write
CVE-2024-8231 2024-10-17 05:01 2024-08-28 Show GitHub Exploit DB Packet Storm
313815 6.7 MEDIUM
Local
qualcomm srv1m_firmware
srv1h_firmware
snapdragon_auto_5g_modem-rf_gen_2_firmware
sa9000p_firmware
sa8775p_firmware
sa8770p_firmware
sa8650p_firmware
sa8620p_firmware
sa8255p_firmware<…
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record. CWE-120
Classic Buffer Overflow
CVE-2024-23378 2024-10-17 05:00 2024-10-7 Show GitHub Exploit DB Packet Storm
313816 6.7 MEDIUM
Local
qualcomm wsa8835_firmware
wsa8830_firmware
wsa8815_firmware
wsa8810_firmware
wcn3990_firmware
wcd9380_firmware
wcd9341_firmware
wcd9340_firmware
wcd9335_firmware
srv1m_firmware
s…
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario. CWE-415
 Double Free
CVE-2024-23379 2024-10-17 04:58 2024-10-7 Show GitHub Exploit DB Packet Storm
313817 7.5 HIGH
Network
qualcomm snapdragon_w5\+_gen_1_wearable_platform_firmware
wsa8835_firmware
wsa8830_firmware
wsa8810_firmware
wcn3988_firmware
wcn3980_firmware
wcn3950_firmware
wcd9385_firmware
wcd9380…
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. CWE-125
Out-of-bounds Read
CVE-2024-33049 2024-10-17 04:57 2024-10-7 Show GitHub Exploit DB Packet Storm
313818 7.5 HIGH
Network
phpoffice phpspreadsheet PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX fil… CWE-918
CWE-36
Server-Side Request Forgery (SSRF) 
 Absolute Path Traversal
CVE-2024-45290 2024-10-17 04:54 2024-10-8 Show GitHub Exploit DB Packet Storm
313819 8.2 HIGH
Network
qualcomm qca6574au_firmware
qca6574a_firmware
qca6564au_firmware
qca6564a_firmware
mdm9628_firmware
Information disclosure while parsing the multiple MBSSID IEs from the beacon. CWE-125
Out-of-bounds Read
CVE-2024-33064 2024-10-17 04:52 2024-10-7 Show GitHub Exploit DB Packet Storm
313820 7.8 HIGH
Local
qualcomm wsa8845h_firmware
wsa8845_firmware
wsa8840_firmware
wsa8835_firmware
wsa8830_firmware
wsa8815_firmware
wsa8810_firmware
wcd9385_firmware
wcd9380_firmware
wcd9375_firmware
Memory corruption while taking snapshot when an offset variable is set by camera driver. NVD-CWE-noinfo
CVE-2024-33065 2024-10-17 04:50 2024-10-7 Show GitHub Exploit DB Packet Storm