Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229611 5.8 警告 xpression news - X-News の news.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1042 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229612 9.3 危険 sandh - S&H Computer Systems News Rover におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-1041 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229613 7.5 危険 xpression news - X-News の archives.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1040 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229614 5 警告 shemes.com - Shemes.com Grabit におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1038 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229615 9.3 危険 rsbr-software - News File Grabber におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-1037 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229616 7.5 危険 PHPNUKE - PHP-Nuke 用の Emporium モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1034 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229617 6.8 警告 phpMyFAQ - phpMyFAQ における "サーバ上にファイルをアップロードする権限を取得される" 脆弱性 CWE-noinfo
情報不足
CVE-2007-1032 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
229618 6.8 警告 spoonlabs - SpoonLabs Vivvo Article Management CMS の include/db_conn.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1031 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229619 7.6 危険 quicksoft - Quiksoft EasyMail Objects の IMAP4 コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1029 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
229620 7.5 危険 scriptdungeon - XLAtunes の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1026 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312881 9.8 CRITICAL
Network
oretnom23 yoga_class_registration_system A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the co… NVD-CWE-noinfo
CVE-2024-7851 2024-08-30 00:22 2024-08-16 Show GitHub Exploit DB Packet Storm
312882 5.4 MEDIUM
Network
fiware keyrock Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link. CWE-330
 Use of Insufficiently Random Values
CVE-2024-42165 2024-08-30 00:21 2024-08-12 Show GitHub Exploit DB Packet Storm
312883 4.3 MEDIUM
Network
fiware keyrock Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two factor authorization of any user by predicting the token for the disable_2fa l… CWE-330
 Use of Insufficiently Random Values
CVE-2024-42164 2024-08-30 00:19 2024-08-12 Show GitHub Exploit DB Packet Storm
312884 8.1 HIGH
Network
fiware keyrock Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link. CWE-326
Inadequate Encryption Strength
CVE-2024-42163 2024-08-30 00:17 2024-08-12 Show GitHub Exploit DB Packet Storm
312885 9.8 CRITICAL
Network
oretnom23 music_gallery_site A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file /admin/?page=musics/manage_music. The manipulation of the argu… CWE-89
SQL Injection
CVE-2024-8222 2024-08-30 00:13 2024-08-28 Show GitHub Exploit DB Packet Storm
312886 9.8 CRITICAL
Network
oretnom23 music_gallery_site A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. This vulnerability affects unknown code of the file /classes/Master.php?f=delete_category. The manipulation … CWE-89
SQL Injection
CVE-2024-8223 2024-08-30 00:11 2024-08-28 Show GitHub Exploit DB Packet Storm
312887 9.8 CRITICAL
Network
angeljudesuarez tailoring_management_system A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file staffedit.php. The … CWE-89
SQL Injection
CVE-2024-8220 2024-08-29 23:49 2024-08-28 Show GitHub Exploit DB Packet Storm
312888 9.0 CRITICAL
Network
microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-843
Type Confusion
CVE-2024-38219 2024-08-29 23:45 2024-08-12 Show GitHub Exploit DB Packet Storm
312889 5.4 MEDIUM
Network
ibm aspera_shares IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574. CWE-384
 Session Fixation
CVE-2023-38018 2024-08-29 23:36 2024-08-12 Show GitHub Exploit DB Packet Storm
312890 7.2 HIGH
Network
abinitio authorization_gateway
metadata_hub
An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration. CWE-94
Code Injection
CVE-2024-37382 2024-08-29 23:29 2024-08-9 Show GitHub Exploit DB Packet Storm