Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230641 6.9 警告 VMware - VMWare Workstation の vstor2-ws60.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-4593 2012-12-20 18:33 2007-08-29 Show GitHub Exploit DB Packet Storm
230642 6.9 警告 VMware - VMWare Workstation の vstor-ws60.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-4591 2012-12-20 18:33 2007-08-29 Show GitHub Exploit DB Packet Storm
230643 7.5 危険 wbb2-addon - WBB2-Addon: Acrotxt の acrotxt.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4581 2012-12-20 18:33 2007-08-28 Show GitHub Exploit DB Packet Storm
230644 7.2 危険 trustware - BufferZone の redlight.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2007-4580 2012-12-20 18:33 2007-08-28 Show GitHub Exploit DB Packet Storm
230645 6.8 警告 ソフォス - Windows および Unix/Linux 用の Sophos Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2007-4578 2012-12-20 18:33 2007-08-28 Show GitHub Exploit DB Packet Storm
230646 7.8 危険 ソフォス - Unix/Linux 用の Sophos Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-4577 2012-12-20 18:33 2007-08-28 Show GitHub Exploit DB Packet Storm
230647 10 危険 リアルネットワークス - Helix DNA Server の RTSP サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
CWE-20
CVE-2007-4561 2012-12-20 18:33 2007-08-27 Show GitHub Exploit DB Packet Storm
230648 6.8 警告 Python Software Foundation - Python の tarfile モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4559 2012-12-20 18:33 2007-08-27 Show GitHub Exploit DB Packet Storm
230649 4.3 警告 Tiki Software Community Association - Tikiwiki の tiki-remind_password.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4554 2012-12-20 18:33 2007-08-27 Show GitHub Exploit DB Packet Storm
230650 5 警告 Thomson - Thomson ST 2030 SIP 電話機におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-4553 2012-12-20 18:33 2007-08-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313201 4.3 MEDIUM
Network 		- - The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via AJAX like wpeg_settings and … CWE-862
 Missing Authorization 		CVE-2024-8437 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313202 9.9 CRITICAL
Network 		- - The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'edit_imageId' and 'edit_imageDelete' parameters in all versions up to, and including, 4.8.5… CWE-89
SQL Injection 		CVE-2024-8436 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313203 6.4 MEDIUM
Network 		- - The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute within the 'wp:radio-p… CWE-79
Cross-site Scripting 		CVE-2024-8267 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313204 - - - Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and before is vulnerable to a message forgery / impersonation issue. Attackers can abuse the UpdateOTRAck method to send ephemeral messages as… - CVE-2024-46936 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313205 - - - IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information. - CVE-2024-46612 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313206 - - - Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in the UserController.jav… - CVE-2024-46607 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313207 - - - Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to … CWE-277
 Insecure Inherited Permissions 		CVE-2024-45599 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313208 - - - An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delet… - CVE-2024-42797 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313209 - - - Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point man… - CVE-2024-42507 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm
313210 - - - Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point man… - CVE-2024-42506 2024-09-26 22:32 2024-09-25 Show GitHub Exploit DB Packet Storm