Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231481 5.8 警告 VMware - EMC VMware の IntraProcessLogging.dll における絶対パストラバーサルの脆弱性 - CVE-2007-4059 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231482 4.6 警告 ultradefrag - UltraDefrag の FindFiles 関数におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-4051 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231483 4.3 警告 phpsysinfo - phpSysInfo の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4048 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
231484 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-4043 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
231485 9.3 危険 Yahoo! - Yahoo! Widgets の YDPCTL.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4034 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
231486 7.5 危険 webSPELL - Webspell の index.php における絶対パストラバーサルの脆弱性 - CVE-2007-4028 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
231487 6.8 警告 Telaxus LLC - epesi framework における任意の PHP コードを実行される脆弱性 - CVE-2007-4026 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
231488 4.3 警告 サン・マイクロシステムズ - Windows 用の SJS Application Server における JSP ソースコードを取得される脆弱性 - CVE-2007-4025 2012-12-20 18:33 2007-07-24 Show GitHub Exploit DB Packet Storm
231489 4.3 警告 w1l3d4 - W1L3D4 Philboard の W1L3D4_aramasonuc.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4024 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
231490 4.3 警告 WordPress.org - WordPress 用の Blix テーマなどに関する特定の index.php インストールスクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4014 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313371 9.8 CRITICAL
Network 		code-projects pharmacy_management_system A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. Affected is an unknown function of the file /add_new_purchase.php?action=is_supplier. The manipu… CWE-89
SQL Injection 		CVE-2024-10138 2024-10-22 23:16 2024-10-19 Show GitHub Exploit DB Packet Storm
313372 9.8 CRITICAL
Network 		code-projects pharmacy_management_system A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_invoice.php. The manipulation … CWE-89
SQL Injection 		CVE-2024-10136 2024-10-22 23:15 2024-10-19 Show GitHub Exploit DB Packet Storm
313373 3.8 LOW
Network 		exceedone exment Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in user with the permission of table management may obtain and… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2024-46897 2024-10-22 23:09 2024-10-18 Show GitHub Exploit DB Packet Storm
313374 7.5 HIGH
Network 		moxa mxsecurity The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable. By acquiring a valid authenticator, an attacker can pose as an aut… NVD-CWE-Other
CVE-2024-4739 2024-10-22 23:07 2024-10-18 Show GitHub Exploit DB Packet Storm
313375 5.4 MEDIUM
Network 		tahoe debrandify The Debrandify · Remove or Replace WordPress Branding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.2 due to insuffi… CWE-79
Cross-site Scripting 		CVE-2024-9674 2024-10-22 23:02 2024-10-18 Show GitHub Exploit DB Packet Storm
313376 5.4 MEDIUM
Network 		sajjadhsagor advanced_category_and_custom_taxonomy_image The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 d… CWE-79
Cross-site Scripting 		CVE-2024-9425 2024-10-22 22:55 2024-10-18 Show GitHub Exploit DB Packet Storm
313377 7.5 HIGH
Network 		oisf suricata Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, invalid ALPN in TLS/QUIC traffic when JA4 matching/loggin… CWE-617
 Reachable Assertion 		CVE-2024-47522 2024-10-22 22:51 2024-10-17 Show GitHub Exploit DB Packet Storm
313378 7.5 HIGH
Network 		oisf suricata Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" lea… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-47188 2024-10-22 22:50 2024-10-17 Show GitHub Exploit DB Packet Storm
313379 7.5 HIGH
Network 		oisf suricata Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" lea… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-47187 2024-10-22 22:48 2024-10-17 Show GitHub Exploit DB Packet Storm
313380 5.3 MEDIUM
Network 		oisf suricata Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to fail… CWE-193
 Off-by-one Error 		CVE-2024-45796 2024-10-22 22:37 2024-10-17 Show GitHub Exploit DB Packet Storm