Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227211 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher における SQL インジェクションの脆弱性 - CVE-2006-6399 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227212 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher における SQL インジェクションの脆弱性 - CVE-2006-6398 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227213 5 警告 ulrik petersen - Ulrik Petersen Emdros Database Engine におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6395 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227214 7.5 危険 plx web studio - plx Web Studio plx Pay の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6392 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227215 6.8 警告 positive software - Positive Software H-Sphere のコントロールパネルにおける任意のファイルにログデータを追加される脆弱性 - CVE-2006-6382 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227216 7.5 危険 ultimate helpdesk - Ultimate HelpDesk の getfile.asp におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6381 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227217 6.8 警告 ultimate helpdesk - Ultimate HelpDesk の index.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6380 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227218 7.5 危険 widcomm - BTSaveMySql における設定情報を取得される脆弱性 - CVE-2006-6378 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227219 7.5 危険 uploadscript - Uploadscript における admin パスワードハッシュを取得される脆弱性 - CVE-2006-6377 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
227220 6.8 警告 Simple Machines - SMF の display.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6375 2012-12-20 18:02 2006-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248841 7.5 HIGH
Network 		- - A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions. CWE-20
 Improper Input Validation  		CVE-2022-2232 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
248842 - - - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2. Thi… CWE-708
 Incorrect Ownership Assignment 		CVE-2024-9633 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248843 - - - A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers attacker to access sensitive files and directories via /login… - CVE-2024-50843 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248844 - - - A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbi… - CVE-2024-50842 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248845 - - - A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execu… - CVE-2024-50841 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248846 - - - A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary … - CVE-2024-50840 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248847 - - - A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbi… - CVE-2024-50839 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248848 - - - Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web server, affecting version 14.1. This vulnerability could allow remote users to byp… CWE-22
Path Traversal 		CVE-2024-11215 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248849 8.8 HIGH
Network 		- - The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.9.107 via deserialization of untrusted input in the 'replac… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-10962 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
248850 - - - An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2. The vulnerability could allow an attacker to inject malicious Ja… CWE-79
Cross-site Scripting 		CVE-2024-8648 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm