Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248541 7.2 危険 アップル - Apple Mac OS X の VPN サービスにおける権限を取得される脆弱性 - CVE-2006-4411 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248542 7.5 危険 アップル - Apple Mac OS X の Security Framework におけるシステムにアクセスされる脆弱性 - CVE-2006-4410 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248543 5 警告 アップル - Apple Mac OS X の Online Certificate Status Protocol (OCSP) サービスにおける失効済み証明書をシステムが承認する脆弱性 - CVE-2006-4409 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248544 5 警告 アップル - Apple Mac OS X の Security Framework におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4408 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248545 5 警告 アップル - Apple Mac OS X の Security Framework におけるトラフィックを解読される脆弱性 - CVE-2006-4407 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248546 10 危険 アップル - Apple Mac OS X の Installer アプリケーションにおける特定ソフトウェアインストール前にユーザ認証を行わない脆弱性 - CVE-2006-4404 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248547 4 警告 アップル - Apple Mac OS X の FTP サーバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4403 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248548 5.1 警告 アップル - Mac OS の CFNetwork における任意の FTP コマンドを実行される脆弱性 - CVE-2006-4401 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248549 7.2 危険 アップル - Mac OS X の ATS サーバにおけるバッファオーバーフローの脆弱性 - CVE-2006-4398 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
248550 4.6 警告 アップル - Mac OS X の ATS サーバにおける任意のファイルを作成される脆弱性 - CVE-2006-4396 2012-06-26 15:37 2006-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315201 8.8 HIGH
Network 		qnap video_station A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed… CWE-89
SQL Injection 		CVE-2023-50360 2024-09-29 08:44 2024-09-7 Show GitHub Exploit DB Packet Storm
315202 7.8 HIGH
Local 		ui unifi_network_application A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with unifi user shell acces… CWE-77
Command Injection 		CVE-2024-42025 2024-09-29 03:35 2024-09-14 Show GitHub Exploit DB Packet Storm
315203 6.1 MEDIUM
Network 		mm-breaking_news_project mm-breaking_news The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting… CWE-79
Cross-site Scripting 		CVE-2024-8056 2024-09-28 06:29 2024-09-12 Show GitHub Exploit DB Packet Storm
315204 6.1 MEDIUM
Network 		mm-breaking_news_project mm-breaking_news The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add S… CWE-79
Cross-site Scripting 		CVE-2024-8054 2024-09-28 06:29 2024-09-12 Show GitHub Exploit DB Packet Storm
315205 4.8 MEDIUM
Network 		ninjateam header_footer_custom_code The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Sit… CWE-79
Cross-site Scripting 		CVE-2024-6617 2024-09-28 06:28 2024-09-13 Show GitHub Exploit DB Packet Storm
315206 4.8 MEDIUM
Network 		ninjateam header_footer_custom_code The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Sit… CWE-79
Cross-site Scripting 		CVE-2024-6493 2024-09-28 06:28 2024-09-13 Show GitHub Exploit DB Packet Storm
315207 6.8 MEDIUM
Network 		pixeljar favicon_generator The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary f… CWE-352
 Origin Validation Error 		CVE-2024-7863 2024-09-28 06:27 2024-09-13 Show GitHub Exploit DB Packet Storm
315208 4.8 MEDIUM
Network 		premio my_sticky_bar The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputtin… CWE-79
Cross-site Scripting 		CVE-2024-7133 2024-09-28 06:27 2024-09-13 Show GitHub Exploit DB Packet Storm
315209 6.5 MEDIUM
Network 		pixeljar favicon_generator The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitra… CWE-352
 Origin Validation Error 		CVE-2024-7864 2024-09-28 06:26 2024-09-13 Show GitHub Exploit DB Packet Storm
315210 6.5 MEDIUM
Network 		gowildchild visual_sound The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error 		CVE-2024-8047 2024-09-28 06:25 2024-09-17 Show GitHub Exploit DB Packet Storm