Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230281 7.5 危険 ultrize - MiniBill の crontab/run_billing.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3306 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
230282 7.5 危険 spey - Spey における SQL インジェクションの脆弱性 - CVE-2007-3298 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
230283 9.3 危険 迅雷 - xunlei Web Thunderbolt の ThunderServer.webThunder.1 ActiveX コントロールにおける任意のファイルをダウンロードされる脆弱性 - CVE-2007-3296 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
230284 6.5 警告 yabb - YaBB におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3295 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
230285 7.5 危険 XOOPS - XOOPS 用の WiwiMod モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3289 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
230286 4.3 警告 skeltoac - WordPress 用の Automattic Stats プラグインにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3288 2012-12-20 18:19 2007-06-20 Show GitHub Exploit DB Packet Storm
230287 6.8 警告 サン・マイクロシステムズ - Sun Solaris の GNOME XScreenSaver におけるコンソールへアクセスされる脆弱性 - CVE-2007-3283 2012-12-20 18:19 2007-06-19 Show GitHub Exploit DB Packet Storm
230288 9 危険 PostgreSQL.org - PostgreSQL の dblink における全てのライブラリから関数をマッピングおよび実行される脆弱性 - CVE-2007-3280 2012-12-20 18:19 2007-06-19 Show GitHub Exploit DB Packet Storm
230289 10 危険 PostgreSQL.org - PostgreSQL における関数を作成および実行される脆弱性 - CVE-2007-3279 2012-12-20 18:19 2007-06-19 Show GitHub Exploit DB Packet Storm
230290 10 危険 Wikindx project - WIKINDX 用の localization モジュールにおける特定の管理者機能にアクセスされる脆弱性 - CVE-2007-3277 2012-12-20 18:19 2007-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312821 7.5 HIGH
Network 		micropython micropython A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipula… CWE-787
 Out-of-bounds Write 		CVE-2024-8946 2024-09-24 22:11 2024-09-18 Show GitHub Exploit DB Packet Storm
312822 7.8 HIGH
Local 		microsoft visio
office
365_apps
office_long_term_servicing_channel 		Microsoft Office Visio Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-38016 2024-09-24 20:11 2024-09-20 Show GitHub Exploit DB Packet Storm
312823 4.3 MEDIUM
Physics 		redhat
opensc_project 		enterprise_linux
opensc 		A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially craft… CWE-120
Classic Buffer Overflow 		CVE-2024-45619 2024-09-24 08:26 2024-09-4 Show GitHub Exploit DB Packet Storm
312824 7.2 HIGH
Network 		acquia mautic Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and… CWE-89
SQL Injection 		CVE-2022-25775 2024-09-24 08:22 2024-09-19 Show GitHub Exploit DB Packet Storm
312825 5.4 MEDIUM
Network 		acquia mautic Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when sa… CWE-79
Cross-site Scripting 		CVE-2022-25774 2024-09-24 08:21 2024-09-19 Show GitHub Exploit DB Packet Storm
312826 4.8 MEDIUM
Network 		concretecms concrete_cms Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. Since the "Top Navigator Bar" output was not sufficiently sanitized, a rogue adm… CWE-79
Cross-site Scripting 		CVE-2024-8660 2024-09-24 08:00 2024-09-18 Show GitHub Exploit DB Packet Storm
312827 5.5 MEDIUM
Local 		apple visionos The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory. NVD-CWE-noinfo
CVE-2024-40790 2024-09-24 07:55 2024-09-17 Show GitHub Exploit DB Packet Storm
312828 - - - Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects: ?Product Affected Versions LoadMaster From 7.… CWE-20
 Improper Input Validation  		CVE-2024-6658 2024-09-24 05:15 2024-09-13 Show GitHub Exploit DB Packet Storm
312829 7.5 HIGH
Network 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet. CWE-281
 Improper Preservation of Permissions 		CVE-2024-27795 2024-09-24 05:01 2024-09-17 Show GitHub Exploit DB Packet Storm
312830 5.5 MEDIUM
Local 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. CWE-281
 Improper Preservation of Permissions 		CVE-2024-27858 2024-09-24 04:56 2024-09-17 Show GitHub Exploit DB Packet Storm