Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229011 7.5 危険 phpexplorator - phpexplorator の phpexplorator.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1985 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229012 7.5 危険 really simple php and ajax - RSPA における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1982 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229013 7.5 危険 有限会社ブルームーン - XOOPS 用の PopnupBlog モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1979 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229014 7.5 危険 slaed - SLAED CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1975 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229015 7.5 危険 wf-sections
XOOPS		 - Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性 - CVE-2007-1974 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
229016 4.3 警告 sam crew - Sam Crew MyBlog の admin/modify.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1969 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229017 6.8 警告 sam crew - Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1968 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229018 7.5 危険 XOOPS - XOOPS 用の WF-Snippets モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1962 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229019 7.5 危険 phpBB - phpBB 用の Mutant ポータルの mutant_functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1961 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
229020 7.5 危険 XOOPS - XOOPS 用の Rha7 Downloads モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1960 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312881 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tty: serial: ma35d1: Add a NULL check for of_node The pdev->dev.of_node can be NULL if the "serial" node is absent. Add a NULL ch… CWE-476
 NULL Pointer Dereference 		CVE-2024-42248 2024-08-9 05:55 2024-08-8 Show GitHub Exploit DB Packet Storm
312882 9.8 CRITICAL
Network 		tenda i22_firmware A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687). This issue affects the function formApPortalOneKeyAuth of the file /goform/apPortalOneKeyAuth. The manipu… CWE-787
 Out-of-bounds Write 		CVE-2024-7583 2024-08-9 05:54 2024-08-8 Show GitHub Exploit DB Packet Storm
312883 7.5 HIGH
Network 		djangoproject django An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number i… NVD-CWE-noinfo
CVE-2024-41989 2024-08-9 05:35 2024-08-8 Show GitHub Exploit DB Packet Storm
312884 - - - Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129. - CVE-2024-7530 2024-08-9 03:35 2024-08-6 Show GitHub Exploit DB Packet Storm
312885 - - - A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used. - CVE-2024-41910 2024-08-9 03:15 2024-08-6 Show GitHub Exploit DB Packet Storm
312886 - - - A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter. - CVE-2024-41238 2024-08-9 02:35 2024-08-9 Show GitHub Exploit DB Packet Storm
312887 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2024-7123 2024-08-9 02:15 2024-08-9 Show GitHub Exploit DB Packet Storm
312888 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2024-7121 2024-08-9 02:15 2024-08-9 Show GitHub Exploit DB Packet Storm
312889 - - - Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1,… - CVE-2024-7522 2024-08-9 01:35 2024-08-6 Show GitHub Exploit DB Packet Storm
312890 - - - A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via … - CVE-2024-41239 2024-08-9 01:15 2024-08-8 Show GitHub Exploit DB Packet Storm