Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227961 4.6 警告 rocks clusters - Rocks Clusters における権限を取得される脆弱性 - CVE-2006-3693 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227962 7.5 危険 vbzoom - VBZooM における SQL インジェクションの脆弱性 - CVE-2006-3691 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227963 7.5 危険 miniBB - MiniBB Forum における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3690 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227964 7.5 危険 francisco charrua - Fransisco Charrua Photo-Gallery の Room.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-3688 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227965 7.5 危険 D-Link Systems, Inc. - D-Link DI-524 の UPnP サービス内におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3687 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227966 5 警告 ヒューレット・パッカード - HP Open VMS の [SYSEXE]SMPUTIL.EXE におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3686 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227967 5.1 警告 czaries network - CzarNews における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3685 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227968 7.5 危険 softcomplex - SoftComplex PHP Event Calendar の calendar.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3684 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227969 7.5 危険 flipper poll - Flipper Poll の poll.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3683 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
227970 5 警告 Laurent Destailleur - AWStats の awstats.pl におけるインストールパスを取得される脆弱性 - CVE-2006-3682 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1111 7.3 HIGH
Network
- - A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This vulnerability affects unknown code of the file buslocation.php of t… Update CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-6595 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1112 7.3 HIGH
Network
- - A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This issue affects the function create_upload_file of the file src/backend/base/Langflow/api/v1/endpoints.py of the component … Update CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-6596 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1113 2.7 LOW
Network
- - A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function remove_api_keys/has_api_terms of the file src/backend/base/langflow/api/utils/core.py of the component Flo… Update CWE-255
CWE-256
Credentials Management
Plaintext Storage of a Password 
CVE-2026-6597 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1114 4.3 MEDIUM
Network
- - A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/base/Langflow/api/v1/… Update CWE-312
CWE-313
 Cleartext Storage of Sensitive Information
 Cleartext Storage in a File or on Disk
CVE-2026-6598 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1115 6.3 MEDIUM
Network
- - A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function get_client_ip/install_mcp_config of the file src/backend/base/langflow/api/v1/mcp_projects.py of… Update CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2026-6599 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1116 3.5 LOW
Network
- - A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unknown function of the file src/frontend/src/modals/IOModal/components/chatView/chatMessage/components/edit-message.tsx of … Update CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-6600 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1117 4.3 MEDIUM
Network
- - A vulnerability has been found in Lagom WHMCS Template up to 2.4.2. This impacts an unknown function of the component Datatables. The manipulation leads to resource consumption. Remote exploitation o… Update CWE-400
CWE-404
 Uncontrolled Resource Consumption
 Improper Resource Shutdown or Release
CVE-2026-6601 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1118 7.3 HIGH
Network
- - A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad14f7f90f4. Affected is an unknown function of the file /backend/admin/his_admin_account.php. The ma… Update CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-6602 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1119 7.3 HIGH
Network
- - A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/… Update CWE-74
CWE-94
Injection
Code Injection
CVE-2026-6603 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm
1120 7.3 HIGH
Network
- - A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modal… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-6604 2026-04-23 05:22 2026-04-20 Show GitHub Exploit DB Packet Storm