Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228001 4.3 警告 SquirrelMail Project - SquirrelMail におけるクッキーをハイジャックされる脆弱性 - CVE-2006-3665 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228002 4.6 警告 finjan - Finjan Vital Security Appliance における権限を取得される脆弱性 - CVE-2006-3663 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228003 5.8 警告 pixelated by lev - PBL Guestbook の pblguestbook.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3617 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228004 4.3 警告 carbonize - Carbonize Lazarus Guestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3616 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228005 5.1 警告 Phorum - Phorum における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3615 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
228006 7.5 危険 orbitcoders - Orbitcoders OrbitMATRIX の index.php における SQL エラーを誘発される脆弱性 - CVE-2006-3614 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228007 5.8 警告 chamberland technology - Chamberland Technology ezWaiter Online におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3613 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
228008 2.6 注意 Phorum - Phorum におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3612 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
228009 5.5 警告 Phorum - Phorum の pm.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3611 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
228010 5 警告 orbitcoders - Orbitcoders OrbitMATRIX の index.php における重要な情報を取得される脆弱性 - CVE-2006-3610 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248921 6.1 MEDIUM
Network
bna pospratik Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings.This issue affects PosPratik: before v3.… CWE-79
Cross-site Scripting
CVE-2024-9147 2024-11-7 00:53 2024-11-4 Show GitHub Exploit DB Packet Storm
248922 8.8 HIGH
Network
thimpress wp_hotel_booking Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through 2.1.4. CWE-22
Path Traversal
CVE-2024-51582 2024-11-7 00:47 2024-11-4 Show GitHub Exploit DB Packet Storm
248923 9.8 CRITICAL
Network
rainbow-link all_post_contact_form Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allows Upload a Web Shell to a Web Server.This issue affects All Post Contact Form: from n/a th… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-50523 2024-11-7 00:46 2024-11-4 Show GitHub Exploit DB Packet Storm
248924 7.5 HIGH
Network
zimaspace zimaos ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint `http://<Zima_Server_IP:PORT>/v3/file?t… CWE-22
Path Traversal
CVE-2024-48931 2024-11-7 00:46 2024-10-25 Show GitHub Exploit DB Packet Storm
248925 9.8 CRITICAL
Network
lunary lunary A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prior sanitization, all… CWE-89
SQL Injection
CVE-2024-7456 2024-11-7 00:45 2024-11-1 Show GitHub Exploit DB Packet Storm
248926 4.8 MEDIUM
Network
dublue table_of_contents_plus The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting atta… CWE-79
Cross-site Scripting
CVE-2024-5578 2024-11-7 00:44 2024-11-5 Show GitHub Exploit DB Packet Storm
248927 4.8 MEDIUM
Network
nsqua simply_schedule_appointments The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Notification settings, which could allow high … CWE-79
Cross-site Scripting
CVE-2024-7877 2024-11-7 00:42 2024-11-5 Show GitHub Exploit DB Packet Storm
248928 4.8 MEDIUM
Network
nsqua simply_schedule_appointments The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not sanitise and escape some of its Appointment Type settings, which could allow h… CWE-79
Cross-site Scripting
CVE-2024-7876 2024-11-7 00:42 2024-11-5 Show GitHub Exploit DB Packet Storm
248929 9.8 CRITICAL
Network
helloprint helloprint Unrestricted Upload of File with Dangerous Type vulnerability in Helloprint Plug your WooCommerce into the largest catalog of customized print products from Helloprint allows Upload a Web Shell to a … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-50525 2024-11-7 00:42 2024-11-4 Show GitHub Exploit DB Packet Storm
248930 - - - An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room… - CVE-2024-42773 2024-11-7 00:35 2024-08-23 Show GitHub Exploit DB Packet Storm