Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228321 5 警告 xigla - Absolute News Manager.NET における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6271 2012-12-20 18:34 2007-12-7 Show GitHub Exploit DB Packet Storm
228322 4.3 警告 xigla - Absolute News Manager.NET におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6270 2012-12-20 18:34 2007-12-7 Show GitHub Exploit DB Packet Storm
228323 7.5 危険 xigla - Absolute News Manager.NET の xlaabsolutenm.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6269 2012-12-20 18:34 2007-12-7 Show GitHub Exploit DB Packet Storm
228324 5 警告 xigla - Absolute News Manager.NET の pages/default.aspx におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6268 2012-12-20 18:34 2007-12-7 Show GitHub Exploit DB Packet Storm
228325 6.8 警告 VideoLAN - VideoLAN VLC の axvlc.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2007-6262 2012-12-20 18:34 2007-11-30 Show GitHub Exploit DB Packet Storm
228326 7.5 危険 snitz forums 2000 - Snitz Forums 2000 の active.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6240 2012-12-20 18:34 2007-12-5 Show GitHub Exploit DB Packet Storm
228327 5 警告 リアルネットワークス - RealNetworks RealPlayer の特定の ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6235 2012-12-20 18:34 2007-12-4 Show GitHub Exploit DB Packet Storm
228328 7.5 危険 tellmatic - tellmatic における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6231 2012-12-20 18:34 2007-12-4 Show GitHub Exploit DB Packet Storm
228329 7.5 危険 Rayzz - Rayzz Script の common/classes/class_HeaderHandler.lib.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6230 2012-12-20 18:34 2007-12-4 Show GitHub Exploit DB Packet Storm
228330 7.5 危険 Rayzz - Rayzz Script の common/classes/class_HeaderHandler.lib.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6229 2012-12-20 18:34 2007-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312101 5.5 MEDIUM
Local 		adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacke… CWE-416
 Use After Free 		CVE-2024-45107 2024-09-7 01:26 2024-09-5 Show GitHub Exploit DB Packet Storm
312102 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address … CWE-476
 NULL Pointer Dereference 		CVE-2024-45006 2024-09-7 01:26 2024-09-5 Show GitHub Exploit DB Packet Storm
312103 5.3 MEDIUM
Network 		trellix intrusion_prevention_system_manager This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly CWE-287
Improper Authentication 		CVE-2024-5956 2024-09-7 01:25 2024-09-5 Show GitHub Exploit DB Packet Storm
312104 7.5 HIGH
Network 		trellix intrusion_prevention_system_manager This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager. CWE-287
Improper Authentication 		CVE-2024-5957 2024-09-7 01:24 2024-09-5 Show GitHub Exploit DB Packet Storm
312105 4.3 MEDIUM
Network 		wpextended wp_extended The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() funct… CWE-862
 Missing Authorization 		CVE-2024-8121 2024-09-7 01:20 2024-09-4 Show GitHub Exploit DB Packet Storm
312106 6.1 MEDIUM
Network 		wpextended wp_extended The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter in all versions up to, and including, 3.0.8 due to insuffi… CWE-79
Cross-site Scripting 		CVE-2024-8119 2024-09-7 01:11 2024-09-4 Show GitHub Exploit DB Packet Storm
312107 6.1 MEDIUM
Network 		wpextended wp_extended The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘selected_option’ parameter in all versions up to, and including, 3.0.8 d… CWE-79
Cross-site Scripting 		CVE-2024-8117 2024-09-7 01:04 2024-09-4 Show GitHub Exploit DB Packet Storm
312108 6.5 MEDIUM
Network 		bitapps bit_form Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4. CWE-863
 Incorrect Authorization 		CVE-2024-43250 2024-09-7 01:02 2024-08-20 Show GitHub Exploit DB Packet Storm
312109 7.8 HIGH
Local 		samsung notes Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. CWE-22
Path Traversal 		CVE-2024-34656 2024-09-7 00:57 2024-09-4 Show GitHub Exploit DB Packet Storm
312110 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: regulator: da9211: Use irq handler when ready If the system does not come from reset (like when it is kexec()), the regulator mig… NVD-CWE-noinfo
CVE-2022-48891 2024-09-7 00:39 2024-08-21 Show GitHub Exploit DB Packet Storm