Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241951 7.5 危険 aktueldownload - Aktueldownload Haber スクリプトにおける SQL インジェクションの脆弱性 - CVE-2007-1016 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241952 10 危険 aktueldownload - Aktueldownload Haber スクリプトの HaberDetay.asp における SQL インジェクションの脆弱性 - CVE-2007-1015 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241953 4.3 警告 deskpro - DeskPRO の faq.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1012 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241954 2.6 注意 アップル - Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1008 2012-06-26 15:46 2007-02-19 Show GitHub Exploit DB Packet Storm
241955 7.8 危険 CA Technologies - CA eTrust Intrusion Detection の SW3eng.exe におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-1005 2012-06-26 15:46 2007-02-27 Show GitHub Exploit DB Packet Storm
241956 7.5 危険 aspcode.net - PollMentor の admin_poll.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0984 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
241957 6.8 警告 ansatheus - AT Contenator の _admin/nav.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0983 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
241958 10 危険 activex soft - ActSoft DVD-Tools ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-0976 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
241959 5 警告 apache stats - Ian Bezanson Apache Stats における重要な変数を上書きされる脆弱性 - CVE-2007-0975 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
241960 9 危険 シスコシステムズ - Cisco FWSM における特定の ACL 保護を回避される脆弱性 - CVE-2007-0968 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250991 - - - Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2024-47887 2024-10-18 21:53 2024-10-17 Show GitHub Exploit DB Packet Storm
250992 - - - Action Pack is a framework for handling and responding to web requests. Starting in version 3.1.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-41128 2024-10-18 21:53 2024-10-17 Show GitHub Exploit DB Packet Storm
250993 - - - Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system… - CVE-2023-32266 2024-10-18 21:53 2024-10-17 Show GitHub Exploit DB Packet Storm
250994 - - - Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product b… - CVE-2024-7316 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
250995 - - - Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component. - CVE-2024-33453 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
250996 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VillaTheme CURCY allows Reflected XSS.This issue affects CURCY: from n/a through 2.2.3. CWE-79
Cross-site Scripting 		CVE-2024-49283 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
250997 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in dFactory Responsive Lightbox allows Stored XSS.This issue affects Responsive Lightbox: fro… CWE-79
Cross-site Scripting 		CVE-2024-49282 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
250998 - - - ### Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash … CWE-328
 Use of Weak Hash 		CVE-2024-48924 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
250999 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Weblizar Lightbox slider – Responsive Lightbox Gallery allows Stored XSS.This issue affect… CWE-79
Cross-site Scripting 		CVE-2024-49280 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
251000 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TipTopPress Hyperlink Group Block allows Stored XSS.This issue affects Hyperlink Group Blo… CWE-79
Cross-site Scripting 		CVE-2024-49279 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm