Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242171 7.6 危険 ef software - EF Commander におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-0180 2012-06-26 15:45 2007-01-10 Show GitHub Exploit DB Packet Storm
242172 6.8 警告 GForge Group - GForge の search/advanced_search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0176 2012-06-26 15:45 2007-01-10 Show GitHub Exploit DB Packet Storm
242173 4.3 警告 b2evolution - b2evolution の htsrv/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-0175 2012-06-26 15:45 2007-01-10 Show GitHub Exploit DB Packet Storm
242174 7.5 危険 allmyphp - AllMyVisitors の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0170 2012-06-26 15:45 2007-01-10 Show GitHub Exploit DB Packet Storm
242175 7.5 危険 CA Technologies - 複数の CA 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0169 2012-06-26 15:45 2007-01-11 Show GitHub Exploit DB Packet Storm
242176 7.5 危険 CA Technologies - 複数の CA 製品の Tape Engine サービスにおける任意のコードを実行される脆弱性 - CVE-2007-0168 2012-06-26 15:45 2007-01-11 Show GitHub Exploit DB Packet Storm
242177 6.6 警告 FreeBSD - FreeBSD の jail rc.d スクリプトにおける任意のファイルを上書きされる脆弱性 - CVE-2007-0166 2012-06-26 15:45 2007-01-11 Show GitHub Exploit DB Packet Storm
242178 7.8 危険 camouflage - Camouflage における埋め込まれたステガノグラフィーを復号される脆弱性 - CVE-2007-0164 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
242179 7.5 危険 centericq - CenterICQ の hooks/ljhook.cc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0160 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
242180 6.4 警告 geoip - GeoIP の libGeoIP/GeoIPUpdate.c におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0159 2012-06-26 15:45 2007-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251101 - microsoft internet_explorer Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handl… CWE-399
 Resource Management Errors 		CVE-2009-0551 2024-10-22 02:35 2009-04-15 Show GitHub Exploit DB Packet Storm
251102 - microsoft windows_2003_server
windows_xp
windows_vista
windows_server_2008
.net_framework
internet_explorer
report_viewer
sql_server_reporting_services
sql_server
expression_web
p… 		Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-2502 2024-10-22 02:35 2009-10-14 Show GitHub Exploit DB Packet Storm
251103 5.4 MEDIUM
Network 		madrasthemes mas_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MadrasThemes MAS Elementor allows DOM-Based XSS.This issue affects MAS Elementor: from n/a… CWE-79
Cross-site Scripting 		CVE-2024-49233 2024-10-22 02:17 2024-10-18 Show GitHub Exploit DB Packet Storm
251104 5.4 MEDIUM
Network 		themeworm plexx_elementor_extension Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in themeworm Plexx Elementor Extension allows Stored XSS.This issue affects Plexx Elementor E… CWE-79
Cross-site Scripting 		CVE-2024-49234 2024-10-22 02:16 2024-10-18 Show GitHub Exploit DB Packet Storm
251105 5.4 MEDIUM
Network 		hafizuddinahmed crazy_call_to_action_box Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hafiz Uddin Ahmed Crazy Call To Action Box allows Stored XSS.This issue affects Crazy Call… CWE-79
Cross-site Scripting 		CVE-2024-49236 2024-10-22 02:12 2024-10-18 Show GitHub Exploit DB Packet Storm
251106 - - - Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote c… - CVE-2024-37404 2024-10-22 02:10 2024-10-19 Show GitHub Exploit DB Packet Storm
251107 - - - Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector. - CVE-2024-29821 2024-10-22 02:10 2024-10-19 Show GitHub Exploit DB Packet Storm
251108 - - - Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector. - CVE-2024-29213 2024-10-22 02:10 2024-10-19 Show GitHub Exploit DB Packet Storm
251109 - - - ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potential vulnerability has been identified in the input validation process, which cou… CWE-20
 Improper Input Validation  		CVE-2024-49361 2024-10-22 02:10 2024-10-19 Show GitHub Exploit DB Packet Storm
251110 - - - In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in arbitrary code execution. - CVE-2024-45944 2024-10-22 02:10 2024-10-19 Show GitHub Exploit DB Packet Storm