Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231711 7.5 危険 scripter.ch - FCRing の fcring.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1133 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231712 7.5 危険 scripter.ch - Sinapis Forum の sinapis.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1131 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231713 7.5 危険 scipter.ch - Sinapis Gastebuch の sinagb.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1130 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231714 5 警告 watersweb shops - shopkitplus における重要な情報を取得される脆弱性 - CVE-2007-1128 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231715 6.4 警告 watersweb shops - shopkitplus の enc/stylecss.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1127 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231716 5 警告 xt:Commerce - xtcommerce の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1126 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231717 4.3 警告 xeroxer - XeroXer Simple one-file gallery の gallery.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1125 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231718 5 警告 xeroxer - XeroXer Simple one-file gallery の gallery.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1124 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231719 7.5 危険 ZPanel Project - ZPanel における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1123 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
231720 6.4 警告 zephyrsoft toolbox - Mathis Dirksen-Thedens ZephyrSoft Toolbox ABC における SQL インジェクションの脆弱性 - CVE-2007-1122 2012-12-20 18:19 2007-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314551 4.3 MEDIUM
Network
sap permit_to_work Under certain conditions SAP Permit to Work allows an authenticated attacker to access information which would otherwise be restricted causing low impact on the confidentiality of the application. NVD-CWE-noinfo
CVE-2024-41736 2024-09-12 22:51 2024-08-13 Show GitHub Exploit DB Packet Storm
314552 5.0 MEDIUM
Network
sap crm_abap_insights_management SAP CRM ABAP (Insights Management) allows an authenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-41737 2024-09-12 22:49 2024-08-13 Show GitHub Exploit DB Packet Storm
314553 4.3 MEDIUM
Network
sap business_objects_business_intelligence_platform SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitatio… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-42375 2024-09-12 22:46 2024-08-13 Show GitHub Exploit DB Packet Storm
314554 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the reset work queue. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2022-48905 2024-09-12 22:44 2024-08-22 Show GitHub Exploit DB Packet Storm
314555 6.5 MEDIUM
Network
sap shared_service_framework SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high … CWE-862
 Missing Authorization
CVE-2024-42376 2024-09-12 22:43 2024-08-13 Show GitHub Exploit DB Packet Storm
314556 4.3 MEDIUM
Network
sap shared_service_framework SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low i… CWE-862
 Missing Authorization
CVE-2024-42377 2024-09-12 22:42 2024-08-13 Show GitHub Exploit DB Packet Storm
314557 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mptcp: Correctly set DATA_FIN timeout when number of retransmits is large Syzkaller with UBSAN uncovered a scenario where a large… NVD-CWE-noinfo
CVE-2022-48906 2024-09-12 22:41 2024-08-22 Show GitHub Exploit DB Packet Storm
314558 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() During driver initialization, the pointer of card info, i.e. the… CWE-476
 NULL Pointer Dereference
CVE-2022-48908 2024-09-12 22:37 2024-08-22 Show GitHub Exploit DB Packet Storm
314559 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution sequence : smc_release smc_connect_wo… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2022-48909 2024-09-12 22:36 2024-08-22 Show GitHub Exploit DB Packet Storm
314560 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in ->remove() Once allocated the struct lcd2s_data is never freed. Fix the memory leak by swit… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2022-48907 2024-09-12 22:33 2024-08-22 Show GitHub Exploit DB Packet Storm