Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225341 7.5 危険 Elemata - Elemata CMS の functions/global.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4952 2013-07-31 16:11 2013-06-24 Show GitHub Exploit DB Packet Storm
225342 4.3 警告 Mintboard - Mintboard におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4951 2013-07-31 16:06 2013-07-10 Show GitHub Exploit DB Packet Storm
225343 4.3 警告 Appnitro Software - Machform の view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4950 2013-07-31 15:53 2013-07-2 Show GitHub Exploit DB Packet Storm
225344 6.8 警告 Appnitro Software - Machform の view.php における任意の PHP コードを実行される脆弱性 CWE-Other
その他
CVE-2013-4949 2013-07-31 15:41 2013-07-2 Show GitHub Exploit DB Packet Storm
225345 7.5 危険 Appnitro Software - Machform の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4948 2013-07-31 15:27 2013-07-2 Show GitHub Exploit DB Packet Storm
225346 7.5 危険 Sawmill - Sawmill のデータベースのページの更新および作成における脆弱性 CWE-noinfo
情報不足
CVE-2013-4947 2013-07-31 15:18 2013-07-9 Show GitHub Exploit DB Packet Storm
225347 4.3 警告 BMC Software - BMC Service Desk Express におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4946 2013-07-31 15:11 2013-06-12 Show GitHub Exploit DB Packet Storm
225348 7.5 危険 BMC Software - BMC Service Desk Express における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4945 2013-07-31 15:08 2013-06-12 Show GitHub Exploit DB Packet Storm
225349 2.1 注意 Drupal Indonesia - Drupal 用 TinyBox モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4140 2013-07-31 14:44 2013-07-10 Show GitHub Exploit DB Packet Storm
225350 2.6 注意 BuddyDev.com - WordPress 用 BuddyPress Extended Friendship Request プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4944 2013-07-31 14:36 2013-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312851 - - - Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from n/a through 1.2.3.3. CWE-862
 Missing Authorization
CVE-2024-37123 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
312852 - - - Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a thr… CWE-862
 Missing Authorization
CVE-2024-37119 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
312853 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WishList Products WishList Member X allows Path Traversal.This issue affects WishList Member X: from n/… CWE-22
Path Traversal
CVE-2024-37108 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
312854 - - - Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WishList Member X: from n/a throu… CWE-862
 Missing Authorization
CVE-2024-37106 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
312855 - - - Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1. CWE-862
 Missing Authorization
CVE-2024-37096 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
312856 - - - Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n… CWE-862
 Missing Authorization
CVE-2024-37095 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
312857 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check phantom_stream before it is used dcn32_enable_phantom_stream can return null, so returned value must be ch… CWE-476
 NULL Pointer Dereference
CVE-2024-49897 2024-11-1 23:55 2024-10-22 Show GitHub Exploit DB Packet Storm
312858 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: add missing locking in wedged_fini Any non-wedged queue can have a zero refcount here and can be running concu… CWE-667
 Improper Locking
CVE-2024-49943 2024-11-1 23:54 2024-10-22 Show GitHub Exploit DB Packet Storm
312859 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed,… CWE-416
 Use After Free
CVE-2024-49945 2024-11-1 23:52 2024-10-22 Show GitHub Exploit DB Packet Storm
312860 5.9 MEDIUM
Network
securesystems connaisseur A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targets_schema.… CWE-1333
 Inefficient Regular Expression Complexity
CVE-2023-7279 2024-11-1 23:43 2024-09-3 Show GitHub Exploit DB Packet Storm