Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247941 5 警告 GNU Project - gnump3d におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-6130 2012-06-26 15:54 2007-11-26 Show GitHub Exploit DB Packet Storm
247942 5.8 警告 amber script - Amber Script の scripts/include/show_content.php におけるディレクトリトラバーサルの脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6129 2012-06-26 15:54 2007-11-26 Show GitHub Exploit DB Packet Storm
247943 7.5 危険 flor de utopia - WorkingOnWeb の events.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6128 2012-06-26 15:54 2007-11-26 Show GitHub Exploit DB Packet Storm
247944 7.5 危険 AlstraSoft - AlstraSoft E-Friends の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6106 2012-06-26 15:54 2007-11-23 Show GitHub Exploit DB Packet Storm
247945 4 警告 Code Crafters Software Limited. - Ability Mail Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6101 2012-06-26 15:54 2007-11-23 Show GitHub Exploit DB Packet Storm
247946 7.5 危険 adventnet - AdventNet EventLog Analyzer における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6081 2012-06-26 15:54 2007-11-21 Show GitHub Exploit DB Packet Storm
247947 7.5 危険 bcoos - bcoos の banners モジュールの modules/banners/click.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6080 2012-06-26 15:54 2007-11-21 Show GitHub Exploit DB Packet Storm
247948 6.8 警告 bcoos - bcoos の include/common.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6079 2012-06-26 15:54 2007-11-21 Show GitHub Exploit DB Packet Storm
247949 5 警告 Audacity - Audacity におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-6061 2012-06-26 15:54 2007-11-20 Show GitHub Exploit DB Packet Storm
247950 9.3 危険 アンラボ - AhnLab Antivirus Internet Security Platinum におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6060 2012-06-26 15:54 2007-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197821 7.2 HIGH
Network 		servmask one-stop_wp_migration The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-24216 2024-11-21 14:52 2022-03-7 Show GitHub Exploit DB Packet Storm
197822 9.1 CRITICAL
Network 		whatsapp whatsapp
whatsapp_business 		A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7,… CWE-125
Out-of-bounds Read 		CVE-2021-24043 2024-11-21 14:52 2022-02-2 Show GitHub Exploit DB Packet Storm
197823 9.8 CRITICAL
Network 		facebook hermes By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/y… CWE-843
Type Confusion 		CVE-2021-24044 2024-11-21 14:52 2022-01-15 Show GitHub Exploit DB Packet Storm
197824 5.3 MEDIUM
Network 		ray-ban stories_rw4003_65582v_48-23_firmware
stories_rw4002_601\/71_50-22_firmware
stories_rw4005_656013_51-20_firmware
stories_rw4005_6563m3_51-20_firmware 		A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2021-24046 2024-11-21 14:52 2022-01-15 Show GitHub Exploit DB Packet Storm
197825 9.8 CRITICAL
Network 		whatsapp whatsapp The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, Whats… CWE-787
 Out-of-bounds Write 		CVE-2021-24042 2024-11-21 14:52 2022-01-5 Show GitHub Exploit DB Packet Storm
197826 9.8 CRITICAL
Network 		facebook hermes A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. Note that this is only exploitable if the application using Hermes pe… CWE-843
Type Confusion 		CVE-2021-24045 2024-11-21 14:52 2021-12-14 Show GitHub Exploit DB Packet Storm
197827 9.8 CRITICAL
Network 		whatsapp whatsapp
whatsapp_business 		A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a maliciou… CWE-787
 Out-of-bounds Write 		CVE-2021-24041 2024-11-21 14:52 2021-12-8 Show GitHub Exploit DB Packet Storm
197828 4.8 MEDIUM
Network 		ninjaforms contact_form The Ninja Forms Contact Form WordPress plugin before 3.5.8.2 does not sanitise and escape the custom class name of the form field created, which could allow high privilege users to perform Cross-Site… CWE-79
Cross-site Scripting 		CVE-2021-24381 2024-11-21 14:52 2021-10-25 Show GitHub Exploit DB Packet Storm
197829 5.4 MEDIUM
Network 		fortinet fortianalyzer An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a store… CWE-79
Cross-site Scripting 		CVE-2021-24021 2024-11-21 14:52 2021-10-6 Show GitHub Exploit DB Packet Storm
197830 9.8 CRITICAL
Network 		fortinet forticlient_endpoint_management_server An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain adm… CWE-613
 Insufficient Session Expiration 		CVE-2021-24019 2024-11-21 14:52 2021-10-6 Show GitHub Exploit DB Packet Storm