Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226531 7.5 危険 xrdp - xrdp の rdp/rdp_rdp.c における脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5904 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
226532 7.5 危険 xrdp - xrdp の xrdp/funcs.c における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2008-5903 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
226533 7.5 危険 xrdp - xrdp の xrdp/xrdp_bitmap.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5902 2012-12-20 19:10 2009-01-15 Show GitHub Exploit DB Packet Storm
226534 5 警告 Tincan - phplist におけるファイルをインクルードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5887 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
226535 5 警告 takempis - TAKempis Discussion Web におけるパスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5886 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
226536 5 警告 the net guys - The Net Guys ASPired2Quote におけるユーザ名などを含むデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5885 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
226537 4.3 警告 zkesoft - AyeView におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-5884 2012-12-20 19:10 2009-01-12 Show GitHub Exploit DB Packet Storm
226538 7.5 危険 playSMS - playSMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5881 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226539 4.3 警告 phpclanwebsite - Phpclanwebsite の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5879 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
226540 10 危険 リアルネットワークス - RealNetworks Helix Server などにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5911 2012-12-20 19:10 2008-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313291 7.2 HIGH
Network 		- - The Traffic Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in the 'UserWebStat' AJAX function in all versions up to, and including, 1.4.5 due to in… - CVE-2024-7485 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
313292 7.2 HIGH
Network 		- - The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. T… - CVE-2024-7484 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
313293 8.8 HIGH
Network 		- - The Blox Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleUploadFile' function in all versions up to, and including, 1.0.65.… - CVE-2024-6315 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
313294 8.8 HIGH
Network 		- - The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortcode' shortcode in versions up to, and including, 2.4 due to insufficient escapi… - CVE-2023-5000 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
313295 - - - The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high privilege users such as contributor to perform… - CVE-2024-6390 2024-08-5 23:35 2024-08-3 Show GitHub Exploit DB Packet Storm
313296 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-6865 2024-08-5 23:15 2024-08-5 Show GitHub Exploit DB Packet Storm
313297 - - - A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part of the file view_company.php. The manipulation of the argum… CWE-89
SQL Injection 		CVE-2024-7452 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm
313298 - - - A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file apply_now.php. The manipulation … CWE-89
SQL Injection 		CVE-2024-7451 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm
313299 - - - A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resume_upload.php of… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7450 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm
313300 - - - A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file list_tickets.php. The manipulation of the argument… CWE-89
SQL Injection 		CVE-2024-7446 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm