Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227691 7.5 危険 phpecard - phpECard の functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4456 2012-12-20 18:02 2006-08-31 Show GitHub Exploit DB Packet Storm
227692 4.3 警告 PmWiki - PmWiki におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4453 2012-12-20 18:02 2006-08-30 Show GitHub Exploit DB Packet Storm
227693 7.5 危険 web3king - Web3news の security/include/_class.security.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4452 2012-12-20 18:02 2006-08-30 Show GitHub Exploit DB Packet Storm
227694 5.1 警告 phpBB - PHPBB の usercp_avatar.php における Web のプロキシとしてサーバが使用される脆弱性 - CVE-2006-4450 2012-12-20 18:02 2006-08-29 Show GitHub Exploit DB Packet Storm
227695 7.2 危険 X.Org Foundation - libX11 などを含む X.Org および XFree86 における権限を取得される脆弱性 - CVE-2006-4447 2012-12-20 18:02 2006-08-29 Show GitHub Exploit DB Packet Storm
227696 7.5 危険 venture nine - Tagger LE における任意の PHP コードを実行される脆弱性 - CVE-2006-4437 2012-12-20 18:02 2006-09-14 Show GitHub Exploit DB Packet Storm
227697 7.5 危険 Zend Technologies Ltd. - Zend Platform におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4432 2012-12-20 18:02 2006-08-28 Show GitHub Exploit DB Packet Storm
227698 7.5 危険 Zend Technologies Ltd. - Zend Platform の Session Clustering Daemon および mod_cluster モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-4431 2012-12-20 18:02 2006-08-28 Show GitHub Exploit DB Packet Storm
227699 4.3 警告 yapig - YaPIG の template/default/thanks_comment.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4421 2012-12-20 18:02 2006-08-28 Show GitHub Exploit DB Packet Storm
227700 7.5 危険 promanager - ProManager の note.php における SQL インジェクションの脆弱性 - CVE-2006-4419 2012-12-20 18:02 2006-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248921 - - - In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undes… - CVE-2024-44082 2024-11-7 17:35 2024-09-6 Show GitHub Exploit DB Packet Storm
248922 5.5 MEDIUM
Local 		huawei harmonyos Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. NVD-CWE-noinfo
CVE-2024-51519 2024-11-7 08:15 2024-11-5 Show GitHub Exploit DB Packet Storm
248923 7.5 HIGH
Network 		huawei harmonyos Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability. NVD-CWE-noinfo
CVE-2024-51518 2024-11-7 08:15 2024-11-5 Show GitHub Exploit DB Packet Storm
248924 5.5 MEDIUM
Local 		huawei harmonyos Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability. CWE-129
 Improper Validation of Array Index 		CVE-2024-51517 2024-11-7 08:15 2024-11-5 Show GitHub Exploit DB Packet Storm
248925 8.8 HIGH
Network 		darkmysite darkmysite Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite – Advanced Dark Mode Plugin for WordPress darkmysite allows Cross Site Request Forgery.This issue affects DarkMySite – Advance… CWE-352
 Origin Validation Error 		CVE-2024-50466 2024-11-7 08:13 2024-10-30 Show GitHub Exploit DB Packet Storm
248926 9.8 CRITICAL
Network 		hmplugin aidwp Missing Authorization vulnerability in HM Plugin WordPress Stripe Donation and Payment Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Stri… CWE-862
 Missing Authorization 		CVE-2024-50459 2024-11-7 08:11 2024-10-30 Show GitHub Exploit DB Packet Storm
248927 5.3 MEDIUM
Network 		openjsf express A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper… NVD-CWE-noinfo
CVE-2024-10491 2024-11-7 08:08 2024-10-30 Show GitHub Exploit DB Packet Storm
248928 5.4 MEDIUM
Network 		joshlobe ultimate_tinymce The Ultimate TinyMCE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field' shortcode in all versions up to, and including, 5.7 due to insufficient input sanitization and o… CWE-79
Cross-site Scripting 		CVE-2024-8627 2024-11-7 08:06 2024-10-30 Show GitHub Exploit DB Packet Storm
248929 5.5 MEDIUM
Network 		ibm websphere_application_server IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sens… CWE-611
XXE 		CVE-2024-45086 2024-11-7 08:04 2024-11-5 Show GitHub Exploit DB Packet Storm
248930 5.4 MEDIUM
Network 		oracle peoplesoft_enterprise_cost_center_common_application_objects Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported version that is affected is 9.2. Easily exp… NVD-CWE-noinfo
CVE-2024-21264 2024-11-7 07:56 2024-10-16 Show GitHub Exploit DB Packet Storm