Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227931 6.4 警告 professional home page tools - Professional Home Page Tools Guestbook の管理ログインにおけるパスワードを推測する総当り攻撃を実行される脆弱性 - CVE-2006-3753 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227932 7.5 危険 professional home page tools - Professional Home Page Tools Guestbook の class.php における SQL インジェクションの脆弱性 - CVE-2006-3752 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227933 6.8 警告 htmlarea3 - ImageManager 用の HTMLArea3 Addon Component における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3751 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227934 6.8 警告 hashcash - Joomla! 用の com_hashcash の server.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3750 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227935 6.8 警告 Mambo Foundation - Mambo 用の Sitemap コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3749 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
227936 6.8 警告 mamboxchange - Mambo 用の LoudMouth コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3748 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227937 4.3 警告 swsoft - SWsoft Plesk のコントロールパネルにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3737 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227938 7.5 危険 Mambo Foundation - Mambo 用の VideoDB コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3736 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
227939 5.1 警告 mail2forum - phpBB 用の Mail2Forum モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3735 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227940 7.2 危険 シスコシステムズ - CS-MARS 用の CLI におけるルート権限で任意のコマンドを実行される脆弱性 - CVE-2006-3734 2012-12-20 18:02 2006-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249801 - - - AIML Chatbot 1.0 (fixed in 2.0) is vulnerable to Cross Site Scripting (XSS). The vulnerability is exploited through the message input field, where attackers can inject malicious HTML or JavaScript co… - CVE-2024-48396 2024-10-31 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
249802 7.5 HIGH
Network 		octavolabs vernemq A memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS) via excessive memory consumption. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-44459 2024-10-31 05:35 2024-09-13 Show GitHub Exploit DB Packet Storm
249803 - - - A cross-site scripting (XSS) vulnerability in the component /email/welcome.php of Mini Inventory and Sales Management System commit 18aa3d allows attackers to execute arbitrary web scripts or HTML vi… - CVE-2024-42550 2024-10-31 05:35 2024-08-22 Show GitHub Exploit DB Packet Storm
249804 6.8 MEDIUM
Physics 		gncchome gncc_c2_firmware Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port. CWE-287
Improper Authentication 		CVE-2024-31800 2024-10-31 05:35 2024-08-16 Show GitHub Exploit DB Packet Storm
249805 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTM… NVD-CWE-noinfo
CVE-2024-6999 2024-10-31 05:35 2024-08-7 Show GitHub Exploit DB Packet Storm
249806 8.1 HIGH
Network 		mozilla firefox A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. *This issue only affects Android versions of Firefox.* Thi… NVD-CWE-Other
CVE-2024-7523 2024-10-31 05:35 2024-08-6 Show GitHub Exploit DB Packet Storm
249807 4.1 MEDIUM
Network 		solarwinds serv-u Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permissions can modify a variable with a payload. CWE-79
Cross-site Scripting 		CVE-2024-45714 2024-10-31 05:33 2024-10-16 Show GitHub Exploit DB Packet Storm
249808 4.9 MEDIUM
Network 		topdata inner_rep_plus A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file td.js.gz. The manipulation leads… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-10128 2024-10-31 05:31 2024-10-19 Show GitHub Exploit DB Packet Storm
249809 6.1 MEDIUM
Network 		sunburntkamel disconnected Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in sunburntkamel disconnected allows Reflected XSS.This issue affects disconnected: from n/a … CWE-79
Cross-site Scripting 		CVE-2024-49268 2024-10-31 05:30 2024-10-17 Show GitHub Exploit DB Packet Storm
249810 5.4 MEDIUM
Network 		booking banner_creator Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Partnerships at Booking.Com Booking.Com Banner Creator allows Stored XSS.This issue affect… CWE-79
Cross-site Scripting 		CVE-2024-49265 2024-10-31 05:29 2024-10-17 Show GitHub Exploit DB Packet Storm