Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
239061	7.5	危険	accscripts	-	Acc Statistics の admin/Index.php における管理アクセスを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-6294	2012-06-26 16:10	2009-02-26	Show	GitHub Exploit DB Packet Storm

239062	7.5	危険	accscripts	-	Acc Real Estate の admin/Index.php における管理アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-6293	2012-06-26 16:10	2009-02-26	Show	GitHub Exploit DB Packet Storm

239063	7.5	危険	accscripts	-	Acc Autos における管理アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-6292	2012-06-26 16:10	2009-02-26	Show	GitHub Exploit DB Packet Storm

239064	7.5	危険	accscripts	-	Acc PHP eMail における管理アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-6291	2012-06-26 16:10	2009-02-26	Show	GitHub Exploit DB Packet Storm

239065	7.5	危険	getmiro	-	Broadcast Machine における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6287	2012-06-26 16:10	2009-02-25	Show	GitHub Exploit DB Packet Storm

239066	7.5	危険	Activewebsoftwares	-	Active Newsletter の SubscriberStart.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6286	2012-06-26 16:10	2009-02-25	Show	GitHub Exploit DB Packet Storm

239067	7.5	危険	businessvein	-	PHP TV Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6285	2012-06-26 16:10	2009-02-25	Show	GitHub Exploit DB Packet Storm

239068	7.5	危険	1scripts	-	Z1Exchange の edit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6284	2012-06-26 16:10	2009-02-25	Show	GitHub Exploit DB Packet Storm

239069	7.5	危険	bluocms	-	Bluo CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6281	2012-06-26 16:10	2009-02-25	Show	GitHub Exploit DB Packet Storm

239070	7.5	危険	appstate	-	Appalachian State University phpWebSite の links.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6266	2012-06-26 16:10	2009-02-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255881	7.5	HIGH Network	theme-sphere	smartmag	Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in ThemeSphere SmartMag allows Excavation, Accessing Functionality Not Properly Constrained by ACLs.Thi…	CWE-862 Missing Authorization	CVE-2024-37930	2024-09-13 06:24	2024-08-13	Show	GitHub Exploit DB Packet Storm

255882	5.4	MEDIUM Network	softaculous	speedycache	Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Team SpeedyCache.This issue affects SpeedyCache: from n/a through 1.1.8.	CWE-352 Origin Validation Error	CVE-2024-43299	2024-09-13 06:23	2024-08-27	Show	GitHub Exploit DB Packet Storm

255883	8.8	HIGH Network	wpdeveloper	betterdocs	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects BetterDocs: from n/a through …	CWE-22 Path Traversal	CVE-2024-43129	2024-09-13 06:21	2024-08-13	Show	GitHub Exploit DB Packet Storm

255884	4.3	MEDIUM Network	wpdataaccess	wp_data_access	Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmers B.V. WP Data Access.This issue affects WP Data Access: from n/a through 5.5.7.	CWE-352 Origin Validation Error	CVE-2024-43295	2024-09-13 06:20	2024-08-27	Show	GitHub Exploit DB Packet Storm

255885	8.8	HIGH Network	sendinblue	newsletter\ _smtp\ _email_marketing_and_subscribe	Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms b…	CWE-352 Origin Validation Error	CVE-2024-43287	2024-09-13 06:19	2024-08-27	Show	GitHub Exploit DB Packet Storm

255886	4.3	MEDIUM Network	wpbackitup	backup_and_restore_wordpress	Cross-Site Request Forgery (CSRF) vulnerability in WPBackItUp Backup and Restore WordPress.This issue affects Backup and Restore WordPress: from n/a through 1.50.	CWE-352 Origin Validation Error	CVE-2024-43269	2024-09-13 06:18	2024-08-27	Show	GitHub Exploit DB Packet Storm

255887	8.8	HIGH Network	themewinter	wpcafe	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through 2.2.28.	CWE-22 Path Traversal	CVE-2024-43135	2024-09-13 06:18	2024-08-13	Show	GitHub Exploit DB Packet Storm

255888	3.5	LOW Network	analytify	analytify_-_google_analytics_dashboard	Cross-Site Request Forgery (CSRF) vulnerability in Analytify.This issue affects Analytify: from n/a through 5.3.1.	CWE-352 Origin Validation Error	CVE-2024-43265	2024-09-13 06:17	2024-08-27	Show	GitHub Exploit DB Packet Storm

255889	7.5	HIGH Network	jem-products	order_export_for_woocommerce	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in JEM Plugins Order Export for WooCommerce.This issue affects Order Export for WooCommerce: from n/a through 3.23.	NVD-CWE-noinfo	CVE-2024-43259	2024-09-13 06:14	2024-08-27	Show	GitHub Exploit DB Packet Storm

255890	7.5	HIGH Network	storelocatorplus	store_locator_plus	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Store Locator Plus.This issue affects Store Locator Plus: from n/a through 2311.17.01.	NVD-CWE-noinfo	CVE-2024-43258	2024-09-13 06:11	2024-08-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed