Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 2:06 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239381 5 警告 IBM - IBM TSM クライアントにおけるクライアントのデータを読み取られる脆弱性 CWE-200
情報漏えい
CVE-2007-5022 2012-09-25 16:59 2007-09-20 Show GitHub Exploit DB Packet Storm
239382 7.5 危険 InsaneVisions - OneCMS の userreviews.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5016 2012-09-25 16:59 2007-09-20 Show GitHub Exploit DB Packet Storm
239383 4.3 警告 phormer - Phormer の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5013 2012-09-25 16:59 2007-09-20 Show GitHub Exploit DB Packet Storm
239384 6.9 警告 Linux - cp における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2007-4998 2012-09-25 16:59 2007-10-29 Show GitHub Exploit DB Packet Storm
239385 5 警告 マイクロソフト - Microsoft Internet Security などの SOCKS4 Proxy における重要な情報 (別ユーザのセッションの宛先 IP アドレス) を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-4991 2012-09-25 16:59 2007-09-21 Show GitHub Exploit DB Packet Storm
239386 7.5 危険 ktauber - phpBB の Ktauber.com StylesDemo mod の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4984 2012-09-25 16:59 2007-09-19 Show GitHub Exploit DB Packet Storm
239387 10 危険 MW6 Technologies - MW6 Technologies QRCode ActiveX の MW6QRCode.dll における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4982 2012-09-25 16:59 2007-09-19 Show GitHub Exploit DB Packet Storm
239388 4.3 警告 oblius - Obedit の save 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4981 2012-09-25 16:59 2007-09-19 Show GitHub Exploit DB Packet Storm
239389 7.5 危険 kwsphp - KwsPHP の sondages モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4979 2012-09-25 16:59 2007-09-19 Show GitHub Exploit DB Packet Storm
239390 7.5 危険 Erik de Castro Lopo - libsndfile の flac_buffer_copy 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4974 2012-09-25 16:59 2007-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286581 - wu-rating_project wu-rating Cross-site scripting (XSS) vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parame… CWE-79
Cross-site Scripting
CVE-2014-4601 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286582 - wp_ultimate_email_marketer_project wp_ultimate_email_marketer Multiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting
CVE-2014-4600 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286583 - wp-business_directory_project wp-business_directory Multiple cross-site scripting (XSS) vulnerabilities in forms/search.php in the WP-Business Directory (wp-ttisbdir) plugin 1.0.2 and earlier for WordPress allow remote attackers to inject arbitrary we… CWE-79
Cross-site Scripting
CVE-2014-4599 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286584 - wp-tmkm-amazon_project wp-tmkm-amazon Cross-site scripting (XSS) vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting
CVE-2014-4598 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286585 - snapapp_project snapapp Multiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting
CVE-2014-4596 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286586 - wp_restful_project wp_restful Multiple cross-site scripting (XSS) vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) oauth_callback par… CWE-79
Cross-site Scripting
CVE-2014-4595 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286587 - wordpress_responsive_preview_project wordpress_responsive_preview Cross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url pa… CWE-79
Cross-site Scripting
CVE-2014-4594 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286588 - wp_plugin_manager_project wp_plugin_manager Cross-site scripting (XSS) vulnerability in wp-plugins-net/index.php in the WP Plugin Manager (wppm) plugin 1.6.4.b and earlier for WordPress allows remote attackers to inject arbitrary web script or… CWE-79
Cross-site Scripting
CVE-2014-4593 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286589 - wp_microblogs_project wp_microblogs Cross-site scripting (XSS) vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauth_verifier p… CWE-79
Cross-site Scripting
CVE-2014-4590 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
286590 - wp_silverlight_media_player_project wp_silverlight_media_player Cross-site scripting (XSS) vulnerability in uploader.php in the WP Silverlight Media Player (wp-media-player) plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting
CVE-2014-4589 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm