Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241211 2.1 注意 British Columbia Institute of Technology - CodeIgniter の _sanitize_globals 関数における任意のグローバル変数を設定解除される脆弱性 - CVE-2007-3706 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241212 7.5 危険 FuseTalk - FuseTalk における SQL インジェクションの脆弱性 - CVE-2007-3705 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241213 7.5 危険 entertainment cms - Entertainment CMS における特定の管理アクションを実行される脆弱性 - CVE-2007-3704 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241214 7.5 危険 3com - TippingPoint IPS における特定のネットワークトラフィックの検知を回避される脆弱性 - CVE-2007-3701 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241215 7.8 危険 CA Technologies - CA ERwin Data Model Validator におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3696 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241216 10 危険 CA Technologies - CA ERwin Process Modeler の LICRCMD.EXE におけるバッファオーバーフローの脆弱性 - CVE-2007-3695 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241217 4.3 警告 getmiro - Miro Project Broadcast Machine の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-3694 2012-06-26 15:46 2007-11-14 Show GitHub Exploit DB Packet Storm
241218 4.3 警告 gobi and helma - Helma の Gobi におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3693 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241219 6.8 警告 av scripts - avtutorial の changePW.php における SQL インジェクションの脆弱性 - CVE-2007-3691 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241220 7.8 危険 Drupal - Drupal 用の Forward モジュールにおける制限された投稿を読まれる脆弱性 - CVE-2007-3690 2012-06-26 15:46 2007-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251021 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock Use a dedicated mutex to guard kvm_usage_count to fix a pot… CWE-667
 Improper Locking
CVE-2024-47744 2024-10-23 00:44 2024-10-21 Show GitHub Exploit DB Packet Storm
251022 4.8 MEDIUM
Network
code-projects pharmacy_management A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /manage_medicine.php of t… CWE-79
Cross-site Scripting
CVE-2024-10199 2024-10-23 00:40 2024-10-21 Show GitHub Exploit DB Packet Storm
251023 4.8 MEDIUM
Network
code-projects pharmacy_management A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /manage_customer… CWE-79
Cross-site Scripting
CVE-2024-10198 2024-10-23 00:39 2024-10-21 Show GitHub Exploit DB Packet Storm
251024 4.8 MEDIUM
Network
heimkino-praxis movie_database Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bert Kößler Movie Database allows Stored XSS.This issue affects Movie Database: from n/a t… CWE-79
Cross-site Scripting
CVE-2024-43300 2024-10-23 00:35 2024-10-18 Show GitHub Exploit DB Packet Storm
251025 8.8 HIGH
Network
sermonaudio sermonaudio_widgets Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: fr… CWE-89
SQL Injection
CVE-2024-49614 2024-10-23 00:34 2024-10-20 Show GitHub Exploit DB Packet Storm
251026 8.8 HIGH
Network
lodelgeraldo simple_code_insert_shortcode Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lodel Geraldo Simple Code Insert Shortcode allows SQL Injection.This issue affects Simple Code In… CWE-89
SQL Injection
CVE-2024-49613 2024-10-23 00:29 2024-10-20 Show GitHub Exploit DB Packet Storm
251027 6.3 MEDIUM
Network
dell secure_connect_gateway Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vuln… CWE-276
Incorrect Default Permissions 
CVE-2024-47240 2024-10-23 00:28 2024-10-18 Show GitHub Exploit DB Packet Storm
251028 6.1 MEDIUM
Network
madrasthemes mas_companies_for_wp_job_manager The MAS Companies For WP Job Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to… CWE-79
Cross-site Scripting
CVE-2024-9206 2024-10-23 00:27 2024-10-18 Show GitHub Exploit DB Packet Storm
251029 4.3 MEDIUM
Network
smackcoders sendgrid The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wp_mailplus_clear_logs' function in all versions up to, and includ… CWE-862
 Missing Authorization
CVE-2024-9364 2024-10-23 00:26 2024-10-18 Show GitHub Exploit DB Packet Storm
251030 5.4 MEDIUM
Network
tychesoftwares arconix_shortcodes The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 2.1.12 due to insufficient input san… CWE-79
Cross-site Scripting
CVE-2024-9703 2024-10-23 00:25 2024-10-18 Show GitHub Exploit DB Packet Storm