Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229671 9 危険 日本電気 - NEC Universal RAID Utility におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0706 2013-03-1 11:30 2013-02-21 Show GitHub Exploit DB Packet Storm
229672 3.5 注意 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における脆弱性 CWE-noinfo
情報不足
CVE-2012-5096 2013-02-28 18:05 2013-01-15 Show GitHub Exploit DB Packet Storm
229673 4 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0578 2013-02-28 18:04 2013-01-15 Show GitHub Exploit DB Packet Storm
229674 4 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1705 2013-02-28 18:03 2013-01-15 Show GitHub Exploit DB Packet Storm
229675 4 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における脆弱性 CWE-noinfo
情報不足
CVE-2012-0574 2013-02-28 18:03 2013-01-15 Show GitHub Exploit DB Packet Storm
229676 4 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0572 2013-02-28 18:02 2013-01-15 Show GitHub Exploit DB Packet Storm
229677 6.5 警告 MariaDB Corporation Ab.
オラクル
- Oracle MySQL および MariaDB におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5612 2013-02-28 18:00 2012-12-3 Show GitHub Exploit DB Packet Storm
229678 5 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における脆弱性 CWE-noinfo
情報不足
CVE-2012-1702 2013-02-28 18:00 2013-01-15 Show GitHub Exploit DB Packet Storm
229679 7.5 危険 FFmpeg - FFmpeg の libavcodec におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2013-2276 2013-02-28 14:42 2013-02-27 Show GitHub Exploit DB Packet Storm
229680 10 危険 Nuance Communications - Nuance 製品に脆弱性 CWE-119
バッファエラー
CVE-2013-0113 2013-02-28 14:18 2013-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319011 5.4 MEDIUM
Network
zkteco wdms Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter. CWE-79
Cross-site Scripting
CVE-2023-51157 2024-10-3 01:58 2024-09-26 Show GitHub Exploit DB Packet Storm
319012 7.2 HIGH
Network
uncannyowl uncanny_groups_for_learndash The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what user… CWE-862
 Missing Authorization
CVE-2024-8349 2024-10-3 01:50 2024-09-25 Show GitHub Exploit DB Packet Storm
319013 6.5 MEDIUM
Network
madrasthemes mas_static_content The MAS Static Content plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.8 via the static_content() function. This makes it possible for authenticat… NVD-CWE-noinfo
CVE-2024-8483 2024-10-3 01:42 2024-09-25 Show GitHub Exploit DB Packet Storm
319014 6.1 MEDIUM
Network
outtheboxthemes beam_me_up_scotty The Beam me up Scotty – Back to Top Button plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions… CWE-79
Cross-site Scripting
CVE-2024-8741 2024-10-3 01:37 2024-09-25 Show GitHub Exploit DB Packet Storm
319015 8.8 HIGH
Network
ferrislucas promptr A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL. CWE-94
Code Injection
CVE-2024-46489 2024-10-3 01:24 2024-09-26 Show GitHub Exploit DB Packet Storm
319016 6.1 MEDIUM
Network
pierros kodex_posts_likes The Kodex Posts likes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including… CWE-79
Cross-site Scripting
CVE-2024-8713 2024-10-3 01:22 2024-09-25 Show GitHub Exploit DB Packet Storm
319017 9.8 CRITICAL
Network
artbees jupiter_x_core The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7.5. This is due to improper authentication via the Social Login widget. This ma… CWE-306
Missing Authentication for Critical Function
CVE-2024-7781 2024-10-3 01:21 2024-09-26 Show GitHub Exploit DB Packet Storm
319018 5.5 MEDIUM
Local
asg017 sqlite-vec sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. CWE-787
 Out-of-bounds Write
CVE-2024-46488 2024-10-3 01:21 2024-09-26 Show GitHub Exploit DB Packet Storm
319019 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-5480 2024-10-3 01:15 2024-06-7 Show GitHub Exploit DB Packet Storm
319020 9.8 CRITICAL
Network
artbees jupiter_x_core The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the 'validate' function in all versions up to, and including, 4.6.5. This m… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-7772 2024-10-3 01:10 2024-09-26 Show GitHub Exploit DB Packet Storm