Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241391 6.8 警告 dvd x studios - DVD X Player Professional におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3068 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241392 4.3 警告 eqdkp - EQdkp の Key Tracker の Attunement におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3067 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241393 7.8 危険 Cactusoft International FZ-LLC & Cactusoft Ltd. - Cactushop におけるデータベースをダウンロードされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2007-3061 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241394 4.3 警告 codelib - Codelib Linker の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3055 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241395 4.3 警告 codelib - Codelib Linker の search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3054 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241396 7.5 危険 calimero.cms - Calimero.CMS における Web セッションハイジャックの脆弱性 - CVE-2007-3053 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241397 7.5 危険 chameleon cms - chameleon cms におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-3050 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241398 4.3 警告 buttercup wfm - BWFM May 2007 の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3049 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241399 5 警告 Advanced Software Production Line - Advanced Software Production Line Vortex Library におけるバッファオーバーフローの脆弱性 - CVE-2007-3046 2012-06-26 15:46 2007-06-5 Show GitHub Exploit DB Packet Storm
241400 5 警告 サン・マイクロシステムズ
ClamAV
- ClamAV の libclamav/phishcheck.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3025 2012-06-26 15:46 2007-05-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250121 4.9 MEDIUM
Network
pimcore pimcore Pimcore is an open source data and experience management platform. When a PortalUserObject is connected to a PimcoreUser and "Use Pimcore Backend Password" is set to true, the change password functio… NVD-CWE-Other
CVE-2024-49370 2024-11-7 07:31 2024-10-24 Show GitHub Exploit DB Packet Storm
250122 8.8 HIGH
Network
vitaliibryl switch_user Authentication Bypass Using an Alternate Path or Channel vulnerability in Vitalii Bryl iBryl Switch User allows Authentication Bypass.This issue affects iBryl Switch User: from n/a through 1.0.1. NVD-CWE-Other
CVE-2024-49675 2024-11-7 07:24 2024-10-24 Show GitHub Exploit DB Packet Storm
250123 5.4 MEDIUM
Network
migaweb custom_post_type_templates_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Gangolf Custom post type templates for Elementor allows Stored XSS.This issue affe… CWE-79
Cross-site Scripting
CVE-2024-51683 2024-11-7 07:12 2024-11-5 Show GitHub Exploit DB Packet Storm
250124 5.4 MEDIUM
Network
hasthemes ht_builder Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor allows Stored XSS.This issue … CWE-79
Cross-site Scripting
CVE-2024-51682 2024-11-7 07:12 2024-11-5 Show GitHub Exploit DB Packet Storm
250125 5.4 MEDIUM
Network
coderevolution wp_pocket_urls Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodeRevolution WP Pocket URLs allows Stored XSS.This issue affects WP Pocket URLs: from n/… CWE-79
Cross-site Scripting
CVE-2024-51681 2024-11-7 07:11 2024-11-5 Show GitHub Exploit DB Packet Storm
250126 5.4 MEDIUM
Network
crestaproject cresta_addons_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CrestaProject – Rizzo Andrea Cresta Addons for Elementor allows Stored XSS.This issue affe… CWE-79
Cross-site Scripting
CVE-2024-51680 2024-11-7 07:10 2024-11-5 Show GitHub Exploit DB Packet Storm
250127 5.4 MEDIUM
Network
timelord elo_rating_shortcode Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Marcel Pol Elo Rating Shortcode allows Stored XSS.This issue affects Elo Rating Shortcode:… CWE-79
Cross-site Scripting
CVE-2024-51678 2024-11-7 07:10 2024-11-5 Show GitHub Exploit DB Packet Storm
250128 5.4 MEDIUM
Network
webberzone knowledge_base Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WebberZone Knowledge Base allows Stored XSS.This issue affects Knowledge Base: from n/a th… CWE-79
Cross-site Scripting
CVE-2024-51677 2024-11-7 07:10 2024-11-5 Show GitHub Exploit DB Packet Storm
250129 8.8 HIGH
Network
mansurahamed woocommerce_quote_calculator Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mansur Ahamed Woocommerce Quote Calculator allows Blind SQL Injection.This issue affects Woocomme… CWE-89
SQL Injection
CVE-2024-51626 2024-11-7 07:10 2024-11-5 Show GitHub Exploit DB Packet Storm
250130 7.2 HIGH
Network
wpdeveloper betterlinks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper BetterLinks allows SQL Injection.This issue affects BetterLinks: from n/a through 2.1… CWE-89
SQL Injection
CVE-2024-51672 2024-11-7 07:08 2024-11-4 Show GitHub Exploit DB Packet Storm