Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3121 6.1 警告
Network 		HasThemes extensions for cf7 HasThemesのWordPress用extensions for cf7におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-29102 2026-01-30 14:13 2024-03-19 Show GitHub Exploit DB Packet Storm
3122 7.1 重要
Network 		webberzone better search webberzoneのWordPress用better searchにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-29142 2026-01-30 14:13 2024-03-19 Show GitHub Exploit DB Packet Storm
3123 5.4 警告
Network 		HasThemes wishsuite HasThemesのWordPress用wishsuiteにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-29927 2026-01-30 14:13 2024-03-27 Show GitHub Exploit DB Packet Storm
3124 7.5 重要
Network 		wpwebelite WooCommerce Social Login WPWeb EliteのWordPress用WooCommerce Social Loginにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-37502 2026-01-30 14:13 2024-07-9 Show GitHub Exploit DB Packet Storm
3125 9.3 緊急
Network 		wpwebelite WooCommerce PDF Vouchers WPWeb EliteのWordPress用WooCommerce PDF Vouchersにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-39651 2026-01-30 14:13 2024-08-13 Show GitHub Exploit DB Packet Storm
3126 6.1 警告
Network 		wpwebelite WooCommerce PDF Vouchers WPWeb EliteのWordPress用WooCommerce PDF Vouchersにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-39652 2026-01-30 14:12 2024-08-1 Show GitHub Exploit DB Packet Storm
3127 7.5 重要
Network 		- WPWeb EliteのWordPress用Docket - WooCommerce Collections / Wishlist / Watchlistにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2024-43131 2026-01-30 14:12 2024-08-13 Show GitHub Exploit DB Packet Storm
3128 6.1 警告
Network 		wpwebinfotech social auto poster wpwebinfotechのWordPress用social auto posterにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-47369 2026-01-30 14:12 2024-10-5 Show GitHub Exploit DB Packet Storm
3129 7.8 重要
Local 		UPDF UPDF UPDFにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-10213 2026-01-30 14:12 2025-09-10 Show GitHub Exploit DB Packet Storm
3130 6.1 警告
Network 		Vtiger Vtiger CRM VtigerのVtiger CRMにおける複数の脆弱性 CWE-79
CWE-79
CWE-94
CVE-2025-1618 2026-01-30 14:12 2025-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348781 - openbsd openbsd The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via a… NVD-CWE-Other
CVE-2002-2180 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348782 - sonicwall content_filtering SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name. NVD-CWE-Other
CVE-2002-2181 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348783 - seunghyun_seo msn666 Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet. NVD-CWE-Other
CVE-2002-2182 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348784 - phpshare phpshare phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers. NVD-CWE-Other
CVE-2002-2183 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348785 - digi-net_technologies digichat Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet. NVD-CWE-Other
CVE-2002-2184 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348786 - macromedia jrun Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL. NVD-CWE-Other
CVE-2002-2186 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348787 - macromedia jrun Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact. NVD-CWE-Other
CVE-2002-2187 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348788 - openbsd openbsd OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error. NVD-CWE-Other
CVE-2002-2188 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348789 - activxperts_software
microsoft 		activwebserver
windows_2003_server 		Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link. NVD-CWE-Other
CVE-2002-2189 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348790 - artscore_studios cutecast_forum ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file. NVD-CWE-Other
CVE-2002-2190 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm