Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227821 5.1 警告 gonafish - Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性 - CVE-2006-3932 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227822 4.6 警告 tuomas airaksinen - Tuomas Airaksinen Midirecord の midirecord.cc におけるバッファオーバーフローの脆弱性 - CVE-2006-3931 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227823 7.5 危険 mamboxchange - a6mambohelpdesk Mambo コンポーネントの admin.a6mambohelpdesk.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3930 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227824 4.3 警告 ZyXEL - Zyxel Prestige 660H-61 ADSL ルータの Forms/rpSysAdmin スクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3929 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227825 7.5 危険 mikael software - WMNews の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3928 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227826 4.3 警告 phpprobid - PhpProBid の auctionsearch.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3927 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227827 7.5 危険 phpprobid - PhpProBid における SQL インジェクションの脆弱性 - CVE-2006-3926 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227828 6.4 警告 interactual technologies - InterActual Player の iarecord.dll におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3925 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
227829 2.6 注意 fire-mouse - Fire-Mouse Toplist の add.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3923 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
227830 7.5 危険 portailphp - PortailPHP の mod_membre/inscription.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3922 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249871 3.7 LOW
Network 		- - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java… - CVE-2024-21208 2024-10-31 22:35 2024-10-16 Show GitHub Exploit DB Packet Storm
249872 3.3 LOW
Local 		mongodb mongo_crypt_v1.so
mongocryptd 		A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciph… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-8013 2024-10-31 22:33 2024-10-28 Show GitHub Exploit DB Packet Storm
249873 8.8 HIGH
Network 		priyabratasarkar token_login Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token Login allows Authentication Bypass.This issue affects Token Login: from n/a through 1.0.3. CWE-306
Missing Authentication for Critical Function 		CVE-2024-50488 2024-10-31 22:19 2024-10-28 Show GitHub Exploit DB Packet Storm
249874 9.8 CRITICAL
Network 		tareqhasan meetup Authorization Bypass Through User-Controlled Key vulnerability in Meetup allows Privilege Escalation.This issue affects Meetup: from n/a through 0.1. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-50483 2024-10-31 22:12 2024-10-28 Show GitHub Exploit DB Packet Storm
249875 9.8 CRITICAL
Network 		mansurahamed woocommerce_quote_calculator Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mansur Ahamed Woocommerce Quote Calculator allows Blind SQL Injection.This issue affects Woocomme… CWE-89
SQL Injection 		CVE-2024-50479 2024-10-31 22:02 2024-10-28 Show GitHub Exploit DB Packet Storm
249876 9.8 CRITICAL
Network 		codezips hospital_appointment_system A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument U… CWE-89
SQL Injection 		CVE-2024-10449 2024-10-31 21:47 2024-10-29 Show GitHub Exploit DB Packet Storm
249877 8.8 HIGH
Network 		google chrome Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion 		CVE-2024-10230 2024-10-31 17:35 2024-10-23 Show GitHub Exploit DB Packet Storm
249878 9.8 CRITICAL
Network 		swoopnow 1-click_login\ Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication:… CWE-287
Improper Authentication 		CVE-2024-50478 2024-10-31 10:44 2024-10-28 Show GitHub Exploit DB Packet Storm
249879 5.4 MEDIUM
Network 		amilia store Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Drapeau Amilia Store allows Stored XSS.This issue affects Amilia Store: from n/a th… CWE-79
Cross-site Scripting 		CVE-2024-50472 2024-10-31 10:42 2024-10-28 Show GitHub Exploit DB Packet Storm
249880 5.4 MEDIUM
Network 		checklist trip_plan Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Checklist Trip Plan allows Stored XSS.This issue affects Trip Plan: from n/a through 1.0.1… CWE-79
Cross-site Scripting 		CVE-2024-50471 2024-10-31 10:37 2024-10-28 Show GitHub Exploit DB Packet Storm