Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1271 5.4 警告
Network 		HasThemes ht politic HasThemesのWordPress用ht politicにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-51673 2026-01-28 12:38 2024-11-9 Show GitHub Exploit DB Packet Storm
1272 7.2 重要
Network 		Openfind Mail2000 OpenfindのMail2000におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-5399 2026-01-28 12:38 2024-05-27 Show GitHub Exploit DB Packet Storm
1273 8.8 重要
Network 		Openfind Mail2000 OpenfindのMail2000におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-5400 2026-01-28 12:38 2024-05-27 Show GitHub Exploit DB Packet Storm
1274 6.1 警告
Network 		Backdrop backdrop Backdropのbackdropにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-54123 2026-01-28 12:38 2024-11-29 Show GitHub Exploit DB Packet Storm
1275 4.8 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-10023 2026-01-28 12:38 2025-10-27 Show GitHub Exploit DB Packet Storm
1276 4.8 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-12513 2026-01-28 12:38 2026-01-5 Show GitHub Exploit DB Packet Storm
1277 5.3 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-12519 2026-01-28 12:38 2026-01-5 Show GitHub Exploit DB Packet Storm
1278 4.8 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-13056 2026-01-28 12:38 2026-01-5 Show GitHub Exploit DB Packet Storm
1279 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2025-13335 2026-01-28 12:38 2026-01-22 Show GitHub Exploit DB Packet Storm
1280 7.5 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-13927 2026-01-28 12:38 2026-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282851 - ufo2000 ufo2000 The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a large keysize or valsize, which causes a cra… NVD-CWE-Other
CVE-2006-3791 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282852 - ufo2000 ufo2000 SQL injection vulnerability in ServerClientUfo::recv_packet in server_protocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the … NVD-CWE-Other
CVE-2006-3792 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282853 - sitedepth sitedepth_cms PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SD_DIR parameter. NVD-CWE-Other
CVE-2006-3793 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282854 - deluxebb deluxebb Multiple cross-site scripting (XSS) vulnerabilities in DeluxeBB before 1.08 allow remote attackers to inject arbitrary web script or HTML via the (1) membercookie cookie in header.php and the (2) red… NVD-CWE-Other
CVE-2006-3795 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282855 - deluxebb deluxebb DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the "space" user, post as the guest user, and b… NVD-CWE-Other
CVE-2006-3796 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282856 - deluxebb deluxebb SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies. NVD-CWE-Other
CVE-2006-3797 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282857 - deluxebb deluxebb DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV, and (4) _SERVER variables via the _COOKIE (aka COOKIE) variable, which can overwrite the other variab… NVD-CWE-Other
CVE-2006-3798 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282858 - deluxebb deluxebb DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase "union select" or possibly other… NVD-CWE-Other
CVE-2006-3799 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282859 - amazing_flash_commerce afcommerce_shopping_cart Cross-site scripting (XSS) vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the "new review" text box. NVD-CWE-Other
CVE-2006-3800 2018-10-18 06:30 2006-07-24 Show GitHub Exploit DB Packet Storm
282860 - mozilla firefox
seamonkey 		Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attack… NVD-CWE-Other
CVE-2006-3801 2018-10-18 06:30 2006-07-28 Show GitHub Exploit DB Packet Storm