Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227881 6.5 警告 kailash nadh - Kailash Nadh boastMachine における SQL インジェクション保護メカニズムを回避される脆弱性 - CVE-2006-3828 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227882 6.5 警告 kailash nadh - Kailash Nadh boastMachine の bmc/Inc/core/admin/search.inc における SQL インジェクションの脆弱性 - CVE-2006-3827 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227883 4.3 警告 kailash nadh - Kailash Nadh boastMachine におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3826 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227884 5.1 警告 Geodesic Solutions - GeodesicSolutions の index.php における SQL インジェクションの脆弱性 - CVE-2006-3823 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227885 5.1 警告 Geodesic Solutions - GeodesicSolutions GeoAuctions Enterprise の index.php における SQL インジェクションの脆弱性 - CVE-2006-3822 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227886 4.3 警告 ATRC - ATutor におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3821 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227887 7.5 危険 TWiki - TWiki の設定スクリプトにおける任意の Perl コードを実行される脆弱性 - CVE-2006-3819 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227888 7.5 危険 krusader - Krusader におけるパスワードを盗まれる脆弱性 - CVE-2006-3816 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227889 5.1 警告 cheese tracker - Cheese Tracker の loader_xm.cpp におけるバッファオーバーフローの脆弱性 - CVE-2006-3814 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
227890 4.3 警告 amazing flash commerce - Amazing Flash AFCommerce Shopping Cart におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3800 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248551 - - - Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in the PasswordPusher application, affecting… CWE-79
Cross-site Scripting 		CVE-2024-51989 2024-11-9 04:01 2024-11-8 Show GitHub Exploit DB Packet Storm
248552 - - - The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often use… - CVE-2024-8378 2024-11-9 04:01 2024-11-8 Show GitHub Exploit DB Packet Storm
248553 - - - There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame… - CVE-2024-10668 2024-11-9 04:01 2024-11-8 Show GitHub Exploit DB Packet Storm
248554 - - - The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack… - CVE-2024-9926 2024-11-9 04:01 2024-11-8 Show GitHub Exploit DB Packet Storm
248555 - - - A flaw was found in moodle. A local file may include risks when restoring block backups. - CVE-2024-43440 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
248556 - - - A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report. - CVE-2024-43438 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
248557 - - - A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators. - CVE-2024-43436 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
248558 - - - The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability. - CVE-2024-43434 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
248559 - - - A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access. - CVE-2024-43431 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm
248560 - - - To address a cache poisoning risk in Moodle, additional validation for local storage was required. - CVE-2024-43428 2024-11-9 04:01 2024-11-7 Show GitHub Exploit DB Packet Storm