Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248931 6.8 警告 deluxebb - DeluxeBB の newpost.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4079 2012-06-26 15:37 2006-08-10 Show GitHub Exploit DB Packet Storm
248932 7.5 危険 deluxebb - DeluxeBB の pm.php における認証を回避される脆弱性 - CVE-2006-4078 2012-06-26 15:37 2006-08-10 Show GitHub Exploit DB Packet Storm
248933 7.5 危険 comet - Vincenzo Valvano CWFM の CheckUpload.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4077 2012-06-26 15:37 2006-08-10 Show GitHub Exploit DB Packet Storm
248934 6.5 警告 club-nuke - Club-Nuke [XP] における SQL インジェクションの脆弱性 - CVE-2006-4072 2012-06-26 15:37 2006-08-10 Show GitHub Exploit DB Packet Storm
248935 6.8 警告 Cake Software Foundation - CakePHP の cake/libs/error.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4067 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248936 5.1 警告 dmitry sheiko - Dmitry Sheiko SAPID Gallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4065 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248937 7.5 危険 csaba godor - Csaba Godor SAPID Blog Beta における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4063 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248938 5.1 警告 dmitry sheiko - Dmitry Sheiko SAPID Shop の usr/extensions/get_tree.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4062 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248939 7.5 危険 ehmig - ME Download System における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4054 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248940 5.1 警告 ehmig - ME Download System の templates/header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4053 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312581 - - - Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: this is disputed by the vendor because fi… - CVE-2024-48734 2024-11-5 04:35 2024-10-31 Show GitHub Exploit DB Packet Storm
312582 - - - SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL commands via the POST body request. NOTE: this is disputed… - CVE-2024-48733 2024-11-5 04:35 2024-10-31 Show GitHub Exploit DB Packet Storm
312583 - - - http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter. - CVE-2023-52066 2024-11-5 04:35 2024-10-31 Show GitHub Exploit DB Packet Storm
312584 - - - A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs at the /file endpoint, which renders HTML files. Malicious HTML files cont… - CVE-2024-10101 2024-11-5 04:15 2024-10-18 Show GitHub Exploit DB Packet Storm
312585 - - - A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encod… CWE-22
Path Traversal 		CVE-2024-10100 2024-11-5 04:15 2024-10-18 Show GitHub Exploit DB Packet Storm
312586 7.8 HIGH
Local 		intelbras incontrol_web A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webca… CWE-428
CWE-426
 Unquoted Search Path or Element
 Untrusted Search Path 		CVE-2024-9325 2024-11-5 04:15 2024-09-29 Show GitHub Exploit DB Packet Storm
312587 8.8 HIGH
Network 		intelbras incontrol_web A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file /v1/operador/ of the component Relatóri… CWE-94
CWE-74
CWE-707
Code Injection
Injection
 Improper Enforcement of Message or Data Structure 		CVE-2024-9324 2024-11-5 04:15 2024-09-29 Show GitHub Exploit DB Packet Storm
312588 - - - Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter. - CVE-2024-51328 2024-11-5 03:50 2024-11-5 Show GitHub Exploit DB Packet Storm
312589 - - - The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, which allows a local untrusted app with no additional privile… - CVE-2024-48336 2024-11-5 03:50 2024-11-5 Show GitHub Exploit DB Packet Storm
312590 - - - DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `setSWMOption.` - CVE-2024-45893 2024-11-5 03:50 2024-11-5 Show GitHub Exploit DB Packet Storm