Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227891 7.5 危険 deluxebb - DeluxeBB における SQL インジェクション保護を回避される脆弱性 - CVE-2006-3799 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227892 5 警告 deluxebb - DeluxeBB における _GET 変数を上書きされる脆弱性 - CVE-2006-3798 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227893 7.5 危険 deluxebb - DeluxeBB における SQL インジェクションの脆弱性 - CVE-2006-3797 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227894 7.5 危険 deluxebb - DeluxeBB における "スペース" ユーザとしてログインされる脆弱性 - CVE-2006-3796 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227895 2.6 注意 deluxebb - DeluxeBB におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3795 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227896 5.1 警告 sitedepth - SiteDepth CMS の constants.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3793 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227897 7.5 危険 ufo2000 - UFO2000 の server_protocol.cpp における SQL インジェクションの脆弱性 - CVE-2006-3792 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227898 5 警告 ufo2000 - UFO2000 用の server_transport.cpp におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3791 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227899 5 警告 ufo2000 - UFO2000 用の server_transport.cpp におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3790 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
227900 7.5 危険 ufo2000 - UFO2000 の multiplay.cpp における任意のコードを実行される脆弱性 - CVE-2006-3789 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249791 6.1 MEDIUM
Network 		solarwinds solarwinds_platform The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements. CWE-79
Cross-site Scripting 		CVE-2024-45715 2024-10-31 05:59 2024-10-16 Show GitHub Exploit DB Packet Storm
249792 5.4 MEDIUM
Network 		gtranslate google_language_translator The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitizat… CWE-79
Cross-site Scripting 		CVE-2021-4452 2024-10-31 05:57 2024-10-16 Show GitHub Exploit DB Packet Storm
249793 4.3 MEDIUM
Network 		sinaextra sina_extension_for_elementor The Sina Extension for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.7 via the render function in widgets/advanced/sina-moda… CWE-200
Information Exposure 		CVE-2024-9540 2024-10-31 05:56 2024-10-16 Show GitHub Exploit DB Packet Storm
249794 6.1 MEDIUM
Network 		woo product_vendors The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insufficient input sanitization and output e… CWE-79
Cross-site Scripting 		CVE-2017-20193 2024-10-31 05:46 2024-10-16 Show GitHub Exploit DB Packet Storm
249795 4.3 MEDIUM
Network 		agnai agnai Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen loca… CWE-22
Path Traversal 		CVE-2024-47171 2024-10-31 05:46 2024-09-27 Show GitHub Exploit DB Packet Storm
249796 4.8 MEDIUM
Network 		netgate pfsense A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at interfaces_groups_e… CWE-79
Cross-site Scripting 		CVE-2024-46538 2024-10-31 05:45 2024-10-23 Show GitHub Exploit DB Packet Storm
249797 7.5 HIGH
Network 		apple xcode This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data. NVD-CWE-noinfo
CVE-2024-44228 2024-10-31 05:35 2024-10-29 Show GitHub Exploit DB Packet Storm
249798 - - - Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job information. - CVE-2024-50616 2024-10-31 05:35 2024-10-28 Show GitHub Exploit DB Packet Storm
249799 - - - TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. - CVE-2024-50615 2024-10-31 05:35 2024-10-28 Show GitHub Exploit DB Packet Storm
249800 - - - TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. - CVE-2024-50614 2024-10-31 05:35 2024-10-28 Show GitHub Exploit DB Packet Storm