Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189091 4.8 警告
Network
TIV.NET INC. - WordPress 用 WPGlobus プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5362 2018-02-6 16:19 2018-01-11 Show GitHub Exploit DB Packet Storm
189092 8.8 重要
Network
TIV.NET INC. - WordPress 用 WPGlobus プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5361 2018-02-6 16:19 2018-01-11 Show GitHub Exploit DB Packet Storm
189093 8.8 重要
Network
read-and-understood project - WordPress 用 read-and-understood プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2018-5669 2018-02-6 14:12 2018-01-12 Show GitHub Exploit DB Packet Storm
189094 4.8 警告
Network
read-and-understood project - WordPress 用 read-and-understood プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5668 2018-02-6 14:12 2018-01-12 Show GitHub Exploit DB Packet Storm
189095 4.8 警告
Network
read-and-understood project - WordPress 用 read-and-understood プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5667 2018-02-6 14:12 2018-01-12 Show GitHub Exploit DB Packet Storm
189096 7.5 重要
Network
マイクロソフト - Microsoft ChakraCore における制御フローガードを回避される脆弱性 CWE-254
セキュリティ機能
CVE-2018-0818 2018-02-6 12:01 2018-01-3 Show GitHub Exploit DB Packet Storm
189097 4.8 警告
Network
Weblizar - WordPress 用 responsive-coming-soon-page プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5666 2018-02-6 11:51 2018-01-17 Show GitHub Exploit DB Packet Storm
189098 4.8 警告
Network
Weblizar - WordPress 用 responsive-coming-soon-page プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5665 2018-02-6 11:51 2018-01-17 Show GitHub Exploit DB Packet Storm
189099 4.8 警告
Network
Weblizar - WordPress 用 responsive-coming-soon-page プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5664 2018-02-6 11:51 2018-01-17 Show GitHub Exploit DB Packet Storm
189100 4.8 警告
Network
Weblizar - WordPress 用 responsive-coming-soon-page プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5663 2018-02-6 11:51 2018-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2011 - - - Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do… CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-41048 2026-06-23 03:32 2026-06-23 Show GitHub Exploit DB Packet Storm
2012 - - - Incorrect caching of authentication between different users of the  qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authentica… CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-41049 2026-06-23 03:32 2026-06-23 Show GitHub Exploit DB Packet Storm
2013 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 30… CWE-79
Cross-site Scripting
CVE-2026-12619 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2014 - - - The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. CWE-200
Information Exposure
CVE-2026-12620 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2015 - - - Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0. CWE-79
Cross-site Scripting
CVE-2026-12621 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2016 - - - The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. CWE-601
Open Redirect
CVE-2026-12622 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2017 7.8 HIGH
Local
- - A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-12778 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm
2018 7.8 HIGH
Local
- - A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to imprope… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-12780 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm
2019 7.8 HIGH
Local
- - A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The … CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-12786 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm
2020 7.8 HIGH
Local
- - A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The manipulation leads to… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-12781 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm