Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233171 4.3 警告 splitside - Directory Image Gallery の photos.cfm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5292 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
233172 4.3 警告 zomplog - Zomplog におけるファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5278 2012-12-20 18:33 2007-10-8 Show GitHub Exploit DB Packet Storm
233173 6.8 警告 trionic - Trionic Cite CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5271 2012-12-20 18:33 2007-10-8 Show GitHub Exploit DB Packet Storm
233174 7.5 危険 phpfreelog - phpFreeLog の log.php における PHP リモートファイルインクルージョンの脆弱性 CWE-20
不適切な入力確認
CVE-2007-5258 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
233175 7.2 危険 VirusBlokAda Ltd. - VirusBlokAda Vba32 AntiVirus における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5254 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
233176 4.3 警告 webhost automation - Helm におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-5251 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
233177 4.3 警告 uebimiau - Uebimiau の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5235 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
233178 4.6 警告 zomplog - Zomplog の admin/upload_files.php における任意の PHP ファイルを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2007-5231 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
233179 7.5 危険 zomplog - Zomplog の admin/upload_files.php における管理アクションを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5230 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
233180 6.8 警告 poppawid - Poppawid の mail/childwindow.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5221 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314301 9.8 CRITICAL
Network
cozythemes hello_agency Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5. CWE-862
 Missing Authorization
CVE-2024-43341 2024-11-13 10:24 2024-11-2 Show GitHub Exploit DB Packet Storm
314302 8.8 HIGH
Network
enviragallery envira_gallery Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n… CWE-862
 Missing Authorization
CVE-2024-43925 2024-11-13 10:23 2024-11-2 Show GitHub Exploit DB Packet Storm
314303 8.8 HIGH
Network
backupbliss clone Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5. CWE-862
 Missing Authorization
CVE-2024-43298 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314304 8.8 HIGH
Network
backupbliss clone Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5. CWE-862
 Missing Authorization
CVE-2024-43297 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314305 8.8 HIGH
Network
bplugins html5_video_player Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5 Video: from n/a throug… CWE-862
 Missing Authorization
CVE-2024-43296 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314306 8.8 HIGH
Network
wpzoom recipe_card_blocks_for_gutenberg_\&_elementor Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Block… CWE-862
 Missing Authorization
CVE-2024-43293 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314307 8.8 HIGH
Network
fontsplugin fonts Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fonts: from n/a through 3.7.7. CWE-862
 Missing Authorization
CVE-2024-43302 2024-11-13 10:18 2024-11-2 Show GitHub Exploit DB Packet Storm
314308 8.8 HIGH
Network
ukrsolution print_labels_with_barcodes Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode L… CWE-862
 Missing Authorization
CVE-2024-43310 2024-11-13 10:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314309 8.8 HIGH
Network
wpclever wpc_frequently_bought_together_for_woocommerce Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Frequentl… CWE-862
 Missing Authorization
CVE-2024-43312 2024-11-13 10:13 2024-11-2 Show GitHub Exploit DB Packet Storm
314310 5.8 MEDIUM
Network
combodo itop Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and parameters) can be read by anyone having access to iTop URI. This issue has bee… NVD-CWE-noinfo
CVE-2024-32870 2024-11-13 10:07 2024-11-5 Show GitHub Exploit DB Packet Storm