Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228991 7.5 危険 yannick tanguy - ELSEIF CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5305 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
228992 4.3 警告 yannick tanguy - ELSEIF CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5304 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
228993 4.3 警告 snewscms - SnewsCMS Rus の news_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5303 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
228994 4.3 警告 splitside - Directory Image Gallery の photos.cfm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5292 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
228995 4.3 警告 zomplog - Zomplog におけるファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5278 2012-12-20 18:33 2007-10-8 Show GitHub Exploit DB Packet Storm
228996 6.8 警告 trionic - Trionic Cite CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5271 2012-12-20 18:33 2007-10-8 Show GitHub Exploit DB Packet Storm
228997 7.5 危険 phpfreelog - phpFreeLog の log.php における PHP リモートファイルインクルージョンの脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5258 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
228998 7.2 危険 VirusBlokAda Ltd. - VirusBlokAda Vba32 AntiVirus における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5254 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
228999 4.3 警告 webhost automation - Helm におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5251 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
229000 4.3 警告 uebimiau - Uebimiau の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5235 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312121 4.3 MEDIUM
Network 		lenovo xclarity_administrator A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges. NVD-CWE-noinfo
CVE-2024-45103 2024-09-19 10:50 2024-09-14 Show GitHub Exploit DB Packet Storm
312122 6.5 MEDIUM
Network 		lenovo xclarity_administrator A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call. NVD-CWE-noinfo
CVE-2024-45104 2024-09-19 10:49 2024-09-14 Show GitHub Exploit DB Packet Storm
312123 9.8 CRITICAL
Network 		heyewei jfinalcms A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads t… CWE-22
Path Traversal 		CVE-2024-8782 2024-09-19 10:46 2024-09-14 Show GitHub Exploit DB Packet Storm
312124 6.5 MEDIUM
Adjacent 		zephyrproject zephyr BT: Encryption procedure host vulnerability NVD-CWE-noinfo
CVE-2024-5754 2024-09-19 10:44 2024-09-14 Show GitHub Exploit DB Packet Storm
312125 6.5 MEDIUM
Adjacent 		zephyrproject zephyr BT: Missing length checks of net_buf in rfcomm_handle_data CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2024-6258 2024-09-19 10:40 2024-09-14 Show GitHub Exploit DB Packet Storm
312126 9.8 CRITICAL
Network 		mayurik best_free_law_office_management SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/con… CWE-89
SQL Injection 		CVE-2024-44430 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
312127 8.8 HIGH
Network 		qdocs smart_school A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the comp… CWE-89
SQL Injection 		CVE-2024-8784 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
312128 5.4 MEDIUM
Network 		opentibiabr myaac A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Han… CWE-79
Cross-site Scripting 		CVE-2024-8783 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
312129 6.5 MEDIUM
Adjacent 		zephyrproject zephyr BT: Unchecked user input in bap_broadcast_assistant CWE-787
 Out-of-bounds Write 		CVE-2024-5931 2024-09-19 10:35 2024-09-14 Show GitHub Exploit DB Packet Storm
312130 6.5 MEDIUM
Adjacent 		zephyrproject zephyr BT:Classic: Multiple missing buf length checks CWE-369
 Divide By Zero 		CVE-2024-6135 2024-09-19 10:34 2024-09-14 Show GitHub Exploit DB Packet Storm