Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231891 4.3 警告 ZyXEL - Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4318 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231892 4.3 警告 ZyXEL - Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-4317 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231893 4.3 警告 ZyXEL - Zyxel Zywall 2 上で稼動する ZyNOS の管理インターフェースにおける管理アクションを実行される脆弱性 - CVE-2007-4316 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231894 6.8 警告 pixlie - Pixlie の pixlie.php におけるリモートディレクトリツリーのファイルを読み込まれる脆弱性 - CVE-2007-4314 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231895 4.3 警告 サン・マイクロシステムズ - Sun Solaris の finger デーモン における特定の非標準 GECOS フィールドを伴うアカウントを全てリスト化される脆弱性 - CVE-2007-4310 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231896 4.3 警告 Lamp Design - Storesprite におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4307 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231897 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4306 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231898 6.2 警告 systrace
Todd C. Miller
sysjail		 - NetBSD および OpenBSD 上で稼動している Systrace の Sudo monitor mode などにおけるシステムコール割り込みを無効にされる脆弱性 - CVE-2007-4305 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
231899 6.8 警告 サン・マイクロシステムズ - Sun Java System Portal Server における任意の Java メソッドを実行される脆弱性 - CVE-2007-4289 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231900 5 警告 s9y - Serendipity の entryproperties プラグインにおけるパスワード保護を回避される脆弱性 - CVE-2007-4282 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313491 - - - An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveragin… - CVE-2024-39720 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313492 - - - An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the CreateModel route with a path parameter that does not exist, it reflects the "Fi… - CVE-2024-39719 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313493 - - - Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter. - CVE-2024-51065 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313494 - - - Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php. - CVE-2024-51064 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313495 - - - An issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary code via the remove function of the MobaXterm MSI is spawning one Administrative cmd (conhost.exe) - CVE-2024-48200 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313496 - - - Glossarizer through 1.5.2 improperly tries to convert text into HTML. Even though the application itself escapes special characters (e.g., <>), the underlying library converts these encoded character… - CVE-2024-42515 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313497 - - - Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server. - CVE-2024-39332 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313498 - - - Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension. - CVE-2023-52044 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313499 - - - The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges t… CWE-59
Link Following 		CVE-2024-45315 2024-11-2 01:35 2024-10-11 Show GitHub Exploit DB Packet Storm
313500 - - - Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/… - CVE-2024-8037 2024-11-2 01:35 2024-10-2 Show GitHub Exploit DB Packet Storm