Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242361 6 警告 DMXReady - DMXReady Secure Login Manager におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6815 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
242362 5 警告 db hub - DB Hub の src/main.c の clear_user_list 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6810 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
242363 7.5 危険 enthrallweb - Enthrallweb eMates の newsdetail.asp における SQL インジェクションの脆弱性 - CVE-2006-6806 2012-06-26 15:38 2006-12-28 Show GitHub Exploit DB Packet Storm
242364 7.5 危険 enthrallweb - Enthrallweb eJobs の newsdetail.asp における SQL インジェクションの脆弱性 - CVE-2006-6805 2012-06-26 15:38 2006-12-28 Show GitHub Exploit DB Packet Storm
242365 7.5 危険 enthrallweb - Dragon Business Directory - Pro の bus_details.asp における SQL インジェクションの脆弱性 - CVE-2006-6804 2012-06-26 15:38 2006-12-28 Show GitHub Exploit DB Packet Storm
242366 7.5 危険 enthrallweb - Enthrallweb eCars の Types.asp における SQL インジェクションの脆弱性 - CVE-2006-6803 2012-06-26 15:38 2006-12-28 Show GitHub Exploit DB Packet Storm
242367 7.5 危険 enthrallweb - Enthrallweb ePages の actualpic.asp における SQL インジェクションの脆弱性 - CVE-2006-6802 2012-06-26 15:38 2006-12-28 Show GitHub Exploit DB Packet Storm
242368 7.5 危険 efkan forum - Efkan Forum の default.asp における SQL インジェクションの脆弱性 - CVE-2006-6794 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
242369 7.5 危険 chatwm - chatwm の SelGruFra.asp における SQL インジェクションの脆弱性 - CVE-2006-6791 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
242370 6.8 警告 future internet - Future Internet の index.cfm におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6777 2012-06-26 15:38 2006-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250461 - - - Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, posing a significant risk to data integrity. - CVE-2024-30616 2024-11-6 01:04 2024-11-5 Show GitHub Exploit DB Packet Storm
250462 6.1 MEDIUM
Network 		cisco firepower_management_center A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS… CWE-79
Cross-site Scripting 		CVE-2024-20372 2024-11-6 01:04 2024-10-24 Show GitHub Exploit DB Packet Storm
250463 4.6 MEDIUM
Network 		radixiot mango MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Management Edit page. CWE-94
Code Injection 		CVE-2024-37846 2024-11-6 01:03 2024-10-26 Show GitHub Exploit DB Packet Storm
250464 5.4 MEDIUM
Network 		radixiot mango A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting 		CVE-2024-37844 2024-11-6 01:03 2024-10-26 Show GitHub Exploit DB Packet Storm
250465 5.4 MEDIUM
Network 		cisco firepower_management_center A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks. This vulnerability is due … CWE-79
Cross-site Scripting 		CVE-2024-20387 2024-11-6 01:00 2024-10-24 Show GitHub Exploit DB Packet Storm
250466 8.8 HIGH
Network 		radixiot mangoapi
mango 		An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file. CWE-22
Path Traversal 		CVE-2024-37847 2024-11-6 00:47 2024-10-26 Show GitHub Exploit DB Packet Storm
250467 - - - An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation. - CVE-2024-48217 2024-11-6 00:35 2024-11-2 Show GitHub Exploit DB Packet Storm
250468 8.4 HIGH
Local 		cisco firepower_threat_defense A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system usin… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-20412 2024-11-6 00:03 2024-10-24 Show GitHub Exploit DB Packet Storm
250469 5.8 MEDIUM
Network 		cisco firepower_threat_defense A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy. This … NVD-CWE-noinfo
CVE-2024-20431 2024-11-5 23:47 2024-10-24 Show GitHub Exploit DB Packet Storm
250470 8.8 HIGH
Network 		tenda ac15_firmware A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argumen… CWE-787
 Out-of-bounds Write 		CVE-2024-10662 2024-11-5 23:30 2024-11-2 Show GitHub Exploit DB Packet Storm