Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233271 4.3 警告 socketkb - SocketKB の social_game_play.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5647 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
233272 6.8 警告 phppm - PHP Project Management におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5642 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
233273 6.8 警告 phppm - PHP Project Management における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5641 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
233274 10 危険 The Support Incident Tracker Project - Salford Software SiT! における脆弱性 CWE-noinfo
情報不足 		CVE-2007-5635 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
233275 6.8 警告 towels - TOWels の src/scripture.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5628 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
233276 6.8 警告 Creative Digital Resources - SocketMail の content/fnc-readmail3.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5627 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
233277 4.3 警告 simongibson - ASP Site Search SearchSimon Lite の filename.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5625 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
233278 7.5 危険 zehnet - ZZ:FlashChat の admin/inc/help.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5620 2012-12-20 18:33 2007-10-22 Show GitHub Exploit DB Packet Storm
233279 7.2 危険 VMware - VMware Server における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2007-5619 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
233280 7.2 危険 VMware - VMware Playerなどの製品における Authorization などのサービスにおける権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2007-5618 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314401 - - - A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or de… - CVE-2024-37365 2024-11-13 00:48 2024-11-13 Show GitHub Exploit DB Packet Storm
314402 - - - A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown function of the component Login Page. The manipulation leads to improper restricti… CWE-307
CWE-799
mproper Restriction of Excessive Authentication Attempts
 Improper Control of Interaction Frequency 		CVE-2024-11126 2024-11-13 00:48 2024-11-13 Show GitHub Exploit DB Packet Storm
314403 6.3 MEDIUM
Network 		- - A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoin… - CVE-2024-46894 2024-11-13 00:35 2024-11-12 Show GitHub Exploit DB Packet Storm
314404 5.3 MEDIUM
Network 		- - A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthent… CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-46891 2024-11-13 00:35 2024-11-12 Show GitHub Exploit DB Packet Storm
314405 - - - The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could al… - CVE-2024-9836 2024-11-13 00:35 2024-11-12 Show GitHub Exploit DB Packet Storm
314406 - - - The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting i… - CVE-2024-9835 2024-11-13 00:35 2024-11-12 Show GitHub Exploit DB Packet Storm
314407 - - - A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk. - CVE-2024-43439 2024-11-13 00:35 2024-11-12 Show GitHub Exploit DB Packet Storm
314408 - - - A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary. - CVE-2024-43435 2024-11-13 00:35 2024-11-11 Show GitHub Exploit DB Packet Storm
314409 - - - A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users. - CVE-2024-43433 2024-11-13 00:35 2024-11-11 Show GitHub Exploit DB Packet Storm
314410 - - - A flaw was found in moodle. External API access to Quiz can override contained insufficient access control. - CVE-2024-43430 2024-11-13 00:35 2024-11-11 Show GitHub Exploit DB Packet Storm