Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240651 4.3 警告 Cerberus, LLC - Cerberus FTP Server の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5930 2012-06-26 15:54 2007-11-10 Show GitHub Exploit DB Packet Storm
240652 4.3 警告 CA Technologies - CA eTrust SiteMinder Agent の forms/smpwservices.fcc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5923 2012-06-26 15:54 2007-11-9 Show GitHub Exploit DB Packet Storm
240653 5 警告 cypress
bitchx
- BitchX 用の Cypress スクリプト の modules/mdop.m におけるバックドアを含む脆弱性 CWE-200
情報漏えい
CVE-2007-5922 2012-06-26 15:54 2007-11-9 Show GitHub Exploit DB Packet Storm
240654 6.8 警告 アドビシステムズ - Adobe ColdFusion におけるセッションハイジャックの脆弱性 CWE-255
証明書・パスワード管理
CVE-2007-5905 2012-06-26 15:54 2007-11-13 Show GitHub Exploit DB Packet Storm
240655 5 警告 alhem - C++ Sockets Library の HTTPSocket.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-5893 2012-06-26 15:54 2007-11-7 Show GitHub Exploit DB Packet Storm
240656 10 危険 easygb - easyGB の index.php におけるディレクトリトラバーサルの脆弱性 CWE-Other
その他
CVE-2007-5890 2012-06-26 15:54 2007-11-7 Show GitHub Exploit DB Packet Storm
240657 4.3 警告 Coppermine Photo Gallery - CPG の displayecard.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5888 2012-06-26 15:54 2007-11-7 Show GitHub Exploit DB Packet Storm
240658 4.6 警告 bitchx - BitchX の e_hostname 関数における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2007-5839 2012-06-26 15:54 2007-11-6 Show GitHub Exploit DB Packet Storm
240659 7.5 危険 afcommerce - Amazing Flash AFCommerce における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5836 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
240660 5 警告 bosdev - BosDev BosNews の Install.php におけるサービス運用妨害 (ファイルの上書き) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5835 2012-06-26 15:54 2007-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251031 8.8 HIGH
Network
phpgurukul vehicle_record_system A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipu… CWE-89
SQL Injection
CVE-2024-10331 2024-11-1 21:41 2024-10-24 Show GitHub Exploit DB Packet Storm
251032 - - - WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php. - CVE-2024-48237 2024-11-1 17:35 2024-10-26 Show GitHub Exploit DB Packet Storm
251033 - - - ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Linux distribution is configured to allow unprivileged mounts… - CVE-2023-45896 2024-11-1 17:35 2024-08-28 Show GitHub Exploit DB Packet Storm
251034 6.4 MEDIUM
Network
- - The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon widget in all versions up to, and including,… CWE-79
Cross-site Scripting
CVE-2024-9655 2024-11-1 17:15 2024-11-1 Show GitHub Exploit DB Packet Storm
251035 5.4 MEDIUM
Network
- - The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access to data due to a missing capability check on several functions in all versions u… CWE-284
Improper Access Control
CVE-2024-7424 2024-11-1 17:15 2024-11-1 Show GitHub Exploit DB Packet Storm
251036 - - - NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exp… CWE-274
 Improper Handling of Insufficient Privileges
CVE-2024-0106 2024-11-1 15:15 2024-11-1 Show GitHub Exploit DB Packet Storm
251037 - - - NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of s… CWE-274
 Improper Handling of Insufficient Privileges
CVE-2024-0105 2024-11-1 15:15 2024-11-1 Show GitHub Exploit DB Packet Storm
251038 - - - Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protec… - CVE-2024-49501 2024-11-1 14:15 2024-11-1 Show GitHub Exploit DB Packet Storm
251039 - - - Stack-based buffer overflow vulnerability exists in multiple Ricoh laser printers and MFPs which implement Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request… - CVE-2024-47939 2024-11-1 14:15 2024-11-1 Show GitHub Exploit DB Packet Storm
251040 - - - Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect… - CVE-2024-21510 2024-11-1 14:15 2024-11-1 Show GitHub Exploit DB Packet Storm