Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241681 7.5 危険 Drupal - Drupal 用の dba モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-2160 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
241682 4.3 警告 Drupal - Drupal 用の dba モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2159 2012-06-26 15:46 2007-04-11 Show GitHub Exploit DB Packet Storm
241683 7.5 危険 cabron connector - Cabron Connector の services/samples/inclusionService.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2154 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
241684 6.8 警告 atmail pty ltd - Atmail の atmail.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2153 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
241685 7.8 危険 bluearc - BlueArc Titan デバイスの BlueArc-FTPD における他のサイトへトラフィックをリダイレクトする脆弱性 - CVE-2007-2150 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
241686 7.5 危険 bonoestente - Joomla! の Be2004-2 テンプレートの index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2143 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
241687 7.5 危険 ajportal2php - AjPortal2Php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2142 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
241688 7.5 危険 franklin huang - Franklin Huang Flip の everything.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2140 2012-06-26 15:46 2007-04-19 Show GitHub Exploit DB Packet Storm
241689 10 危険 CA Technologies - 複数の CA 製品で使用される CA BrightStor ARCserve Media Server の SUN RPC サービスにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2139 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241690 7.5 危険 BMC Software - BMC Patrol PerformAgent の bgs_sdservice.exe におけるバッファオーバーフローの脆弱性 - CVE-2007-2136 2012-06-26 15:46 2007-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250211 8.2 HIGH
Adjacent 		eufy homebase_2_firmware The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this… CWE-331
 Insufficient Entropy 		CVE-2023-37822 2024-10-29 23:47 2024-10-4 Show GitHub Exploit DB Packet Storm
250212 6.1 MEDIUM
Network 		themeinwp social_share_with_floating_bar The Social Share With Floating Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, … CWE-79
Cross-site Scripting 		CVE-2024-8790 2024-10-29 23:44 2024-10-18 Show GitHub Exploit DB Packet Storm
250213 5.4 MEDIUM
Network 		sukiwp suki_sites_import The Suki Sites Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.1 due to insufficient input sanitization and out… CWE-79
Cross-site Scripting 		CVE-2024-8916 2024-10-29 23:37 2024-10-18 Show GitHub Exploit DB Packet Storm
250214 - xfree86_project x11r6 The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's … NVD-CWE-Other
CVE-2003-0063 2024-10-29 23:35 2003-03-3 Show GitHub Exploit DB Packet Storm
250215 - qualcomm qpopper Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. NVD-CWE-Other
CVE-1999-0006 2024-10-29 23:35 1998-07-14 Show GitHub Exploit DB Packet Storm
250216 - sgi irix IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. NVD-CWE-Other
CVE-1999-0036 2024-10-29 23:35 1997-05-26 Show GitHub Exploit DB Packet Storm
250217 - sgi
bsdi
sun
hp
ibm
freebsd 		irix
bsd_os
sunos
hp-ux
aix
freebsd
solaris 		Local user gains root privileges via buffer overflow in rdist, via expstr() function. NVD-CWE-Other
CVE-1999-0022 2024-10-29 23:35 1996-07-3 Show GitHub Exploit DB Packet Storm
250218 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in xarbo BuddyPress Greeting Message allows Reflected XSS.This issue affects BuddyPress Greet… CWE-79
Cross-site Scripting 		CVE-2024-49650 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250219 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in rafasashi SVG Captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a throug… CWE-79
Cross-site Scripting 		CVE-2024-49648 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250220 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Carl Alberto Simple Custom Admin allows Reflected XSS.This issue affects Simple Custom Adm… - CVE-2024-49647 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm