Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241971 7.5 危険 apache stats - Apache Stats における任意の変数を変更される脆弱性 - CVE-2007-0930 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
241972 4.3 警告 communityserver.org - Community Server の search/SearchResults.aspx におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0925 2012-06-26 15:46 2007-02-14 Show GitHub Exploit DB Packet Storm
241973 4.3 警告 cPanel - cPanel WHM の scripts/passwdmysql におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0890 2012-06-26 15:46 2007-02-12 Show GitHub Exploit DB Packet Storm
241974 7.8 危険 Gecad Technologies - axigen におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0887 2012-06-26 15:46 2007-02-12 Show GitHub Exploit DB Packet Storm
241975 10 危険 Gecad Technologies - axigen におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0886 2012-06-26 15:46 2007-02-12 Show GitHub Exploit DB Packet Storm
241976 7.8 危険 capital request forms - Capital Request Forms におけるデータベースの資格情報を取得される脆弱性 - CVE-2007-0880 2012-06-26 15:46 2007-02-12 Show GitHub Exploit DB Packet Storm
241977 6.8 警告 allons voter - Allons_voter における認証または特定の管理機能のアクセスを回避される脆弱性 - CVE-2007-0874 2012-06-26 15:46 2007-02-12 Show GitHub Exploit DB Packet Storm
241978 7.5 危険 extremepow - eXtremePow eXtreme File Hosting における任意の PHP コードをアップロードされる脆弱性 - CVE-2007-0871 2012-06-26 15:46 2007-02-12 Show GitHub Exploit DB Packet Storm
241979 7.5 危険 cPanel - cPanel WHM の scripts2/objcache におけるリモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0854 2012-06-26 15:46 2007-02-8 Show GitHub Exploit DB Packet Storm
241980 7.5 危険 advanced poll - Advanced Poll の admin/index.php における認証を回避される脆弱性 - CVE-2007-0845 2012-06-26 15:46 2007-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250221 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ioannup Code Generate allows Reflected XSS.This issue affects Code Generate: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2024-49646 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250222 6.4 MEDIUM
Network 		- - The Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's newsletters_video shortcode in all versions up to, and including, 4.9.9.4 due to insufficient input … CWE-79
Cross-site Scripting 		CVE-2024-10181 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250223 - - - A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown processing of the file request.php. The ma… CWE-89
SQL Injection 		CVE-2017-20195 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250224 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jinwen js allows Reflected XSS.This issue affects js paper: from n/a through 2.5.7. CWE-79
Cross-site Scripting 		CVE-2024-49678 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250225 4.3 MEDIUM
Network 		- - The Move Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the render function in includes/widgets/accordion/wi… - CVE-2024-10360 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250226 - - - The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_subscribe shortcode in all versions up to, and including, 3.7.5 d… CWE-79
Cross-site Scripting 		CVE-2024-10233 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250227 6.4 MEDIUM
Network 		- - The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-youtube-embed shortcode in all versions up to, and including, 1.3.2 due to … CWE-79
Cross-site Scripting 		CVE-2024-10185 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250228 6.4 MEDIUM
Network 		- - The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-kick-embed shortcode in all versions up to, and including, 1.1.1 due to insuff… CWE-79
Cross-site Scripting 		CVE-2024-10184 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250229 6.4 MEDIUM
Network 		- - The Kata Plus – Addons for Elementor – Widgets, Extensions and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1… CWE-79
Cross-site Scripting 		CVE-2024-9376 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
250230 - - - Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through 6.5.1. CWE-266
 Incorrect Privilege Assignment 		CVE-2024-50550 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm