Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233271 2.1 注意 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4153 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233272 9.3 危険 visionsoft - Visionsoft Audit の VSAOD におけるリプレイ攻撃を実行される脆弱性 - CVE-2007-4152 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233273 4.3 警告 visionsoft - Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性 - CVE-2007-4151 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233274 10 危険 visionsoft - Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性 - CVE-2007-4150 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233275 10 危険 visionsoft - Visionsoft Audit の VSAOD における任意のファイルを作成される脆弱性 - CVE-2007-4149 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233276 10 危険 visionsoft - Visionsoft Audit の VSAOD におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-4148 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233277 4.3 警告 webevents - ebEvent の webevent.cgi におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4146 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233278 4 警告 phpcoupon - phpCoupon の Billing Control Panel における Premium Member ステイタスを取得される脆弱性 - CVE-2007-4143 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233279 4.3 警告 WordPress.org - WordPress の Temporary Uploads 編集機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4139 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
233280 6.5 警告 レッドハット - Red Hat Network Satellite Server における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2007-4132 2012-12-20 18:33 2007-08-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314891 4.9 MEDIUM
Network 		bitrix24 bitrix24 Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request. CWE-522
 Insufficiently Protected Credentials 		CVE-2024-34882 2024-11-7 04:28 2024-11-5 Show GitHub Exploit DB Packet Storm
314892 8.8 HIGH
Network 		idrsdev agile-board A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. CWE-94
Code Injection 		CVE-2024-51329 2024-11-7 04:19 2024-11-5 Show GitHub Exploit DB Packet Storm
314893 8.1 HIGH
Network 		loginizer loginizer The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2. This is due to insufficient verification on the user be… NVD-CWE-noinfo
CVE-2024-10097 2024-11-7 04:14 2024-11-5 Show GitHub Exploit DB Packet Storm
314894 9.8 CRITICAL
Network 		nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, cau… NVD-CWE-noinfo
CVE-2024-49368 2024-11-7 03:28 2024-10-22 Show GitHub Exploit DB Packet Storm
314895 - - - A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to … CWE-89
SQL Injection 		CVE-2024-20536 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
314896 - - - A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need … CWE-22
Path Traversal 		CVE-2024-20532 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
314897 - - - A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an authenticated, remote attacker with low privileges to conduct a s… CWE-79
Cross-site Scripting 		CVE-2024-20540 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
314898 - - - A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, r… - CVE-2024-20534 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
314899 - - - A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, r… CWE-79
Cross-site Scripting 		CVE-2024-20533 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
314900 - - - A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need … CWE-22
Path Traversal 		CVE-2024-20529 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm