Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226861 7.8 危険 toxiclab - Toxiclab Shoutbox におけるパスワードを含むデータベースをダウンロードされる脆弱性 - CVE-2007-0546 2012-12-20 18:19 2007-01-29 Show GitHub Exploit DB Packet Storm
226862 9.4 危険 zixforum - ZixForum におけるデータベースをダウンロードされる脆弱性 - CVE-2007-0543 2012-12-20 18:19 2007-01-29 Show GitHub Exploit DB Packet Storm
226863 5 警告 WordPress.org - WordPress における任意のファイルの存在を特定される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-0541 2012-12-20 18:19 2007-01-29 Show GitHub Exploit DB Packet Storm
226864 5 警告 WordPress.org - WordPress におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0540 2012-12-20 18:19 2007-01-29 Show GitHub Exploit DB Packet Storm
226865 7.8 危険 WordPress.org - WordPress の wp_remote_fopen 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0539 2012-12-20 18:19 2007-01-29 Show GitHub Exploit DB Packet Storm
226866 5 警告 Telligent - Telligent Community Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0538 2012-12-20 18:19 2007-01-29 Show GitHub Exploit DB Packet Storm
226867 7.2 危険 rPath, Inc - rPath Linux 用の rMake における権限を取得される脆弱性 - CVE-2007-0536 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
226868 7.5 危険 vote pro - Vote! Pro における任意の PHP コードを実行される脆弱性 - CVE-2007-0535 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
226869 5 警告 tuan do - Tuan Do Uploader における管理者パスワードハッシュを取得される脆弱性 - CVE-2007-0532 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
226870 6.8 警告 WebsiteBaker Org - Website Baker の class.login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0527 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249421 8.8 HIGH
Network 		magazine3 pwa_for_wp_\&_amp Missing Authorization vulnerability in Magazine3 PWA for WP & AMP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PWA for WP & AMP: from n/a through 1.7.72. CWE-862
 Missing Authorization 		CVE-2024-47318 2024-11-13 05:32 2024-11-2 Show GitHub Exploit DB Packet Storm
249422 9.8 CRITICAL
Network 		androidbubbles wp_datepicker Missing Authorization vulnerability in Fahad Mahmood WP Datepicker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Datepicker: from n/a through 2.1.1. CWE-862
 Missing Authorization 		CVE-2024-47321 2024-11-13 05:29 2024-11-2 Show GitHub Exploit DB Packet Storm
249423 9.8 CRITICAL
Network 		code-atlantic popup_maker Missing Authorization vulnerability in Popup Maker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Popup Maker: from n/a through 1.19.2. CWE-862
 Missing Authorization 		CVE-2024-47358 2024-11-13 05:28 2024-11-2 Show GitHub Exploit DB Packet Storm
249424 9.8 CRITICAL
Network 		depicter depicter Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a… CWE-862
 Missing Authorization 		CVE-2024-47359 2024-11-13 05:26 2024-11-2 Show GitHub Exploit DB Packet Storm
249425 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases mad_agent_priv lo… NVD-CWE-noinfo
CVE-2024-50095 2024-11-13 05:26 2024-11-6 Show GitHub Exploit DB Packet Storm
249426 8.8 HIGH
Network 		webtechstreet elementor_addon_elements Missing Authorization vulnerability in WPVibes Elementor Addon Elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Addon Elements: from n/a t… CWE-862
 Missing Authorization 		CVE-2024-47361 2024-11-13 05:25 2024-11-2 Show GitHub Exploit DB Packet Storm
249427 7.5 HIGH
Network 		dena h2o h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top of TCP Fast Open or QUIC 0-RTT packets is received and the IP-address-based ac… CWE-290
 Authentication Bypass by Spoofing 		CVE-2024-45397 2024-11-13 05:14 2024-10-12 Show GitHub Exploit DB Packet Storm
249428 7.5 HIGH
Network 		dena quicly Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure tha… CWE-617
 Reachable Assertion 		CVE-2024-45396 2024-11-13 05:05 2024-10-12 Show GitHub Exploit DB Packet Storm
249429 4.3 MEDIUM
Network 		dena h2o h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows users to modify the response headers being sent by h2o. The con… CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2024-25622 2024-11-13 05:04 2024-10-12 Show GitHub Exploit DB Packet Storm
249430 9.8 CRITICAL
Network 		dena picotls Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, picotls (specifically, bindings within pico… CWE-415
 Double Free 		CVE-2024-45402 2024-11-13 05:02 2024-10-12 Show GitHub Exploit DB Packet Storm