Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189641 8.8 重要
Network 		Google - Google Chrome における不正な型変換に関する脆弱性 CWE-704
不正な型変換またはキャスト 		CVE-2017-5059 2017-11-15 16:47 2017-04-19 Show GitHub Exploit DB Packet Storm
189642 8.8 重要
Network 		Google - Google Chrome における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-5057 2017-11-15 16:47 2017-04-19 Show GitHub Exploit DB Packet Storm
189643 8.8 重要
Network 		Google - Google Chrome における境界外読み取りに関する脆弱性 CWE-125
CWE-787
CVE-2017-5056 2017-11-15 16:47 2017-03-29 Show GitHub Exploit DB Packet Storm
189644 8.8 重要
Network 		Google - Google Chrome におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-5054 2017-11-15 16:47 2017-03-29 Show GitHub Exploit DB Packet Storm
189645 9.6 緊急
Network 		Google - Google Chrome における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5053 2017-11-15 16:47 2017-03-29 Show GitHub Exploit DB Packet Storm
189646 8.8 重要
Network 		Google - Google Chrome におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-5052 2017-11-15 16:47 2017-03-29 Show GitHub Exploit DB Packet Storm
189647 9.1 緊急
Network 		Debian - Debian ftpsync におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-8805 2017-11-15 16:25 2017-10-17 Show GitHub Exploit DB Packet Storm
189648 9.8 緊急
Network 		CampbellHoffman.com - WordPress 用 Form Manager プラグインにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2015-7806 2017-11-15 16:25 2015-10-12 Show GitHub Exploit DB Packet Storm
189649 9.8 緊急
Network 		NW.js community - nw.js における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2014-9733 2017-11-15 16:25 2014-12-28 Show GitHub Exploit DB Packet Storm
189650 8.8 重要
Network 		X2Engine - X2Engine X2CRM における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2014-2664 2017-11-15 16:25 2014-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
571 8.2 HIGH
Network 		- - Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parame… New CWE-89
SQL Injection 		CVE-2017-20245 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
572 8.2 HIGH
Network 		- - KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can i… New CWE-89
SQL Injection 		CVE-2017-20246 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
573 8.2 HIGH
Network 		- - WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid para… New CWE-89
SQL Injection 		CVE-2017-20247 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
574 7.5 HIGH
Network 		- - Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests … New CWE-22
Path Traversal 		CVE-2017-20248 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
575 8.2 HIGH
Network 		- - Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attac… New CWE-89
SQL Injection 		CVE-2017-20249 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
576 7.5 HIGH
Network 		- - Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to mac… New CWE-22
Path Traversal 		CVE-2017-20250 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
577 9.8 CRITICAL
Network 		- - WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes thro… New CWE-94
Code Injection 		CVE-2017-20251 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
578 - - - bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompres… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-9669 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
579 7.8 HIGH
Local 		- - A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inse… New CWE-74
CWE-94
CWE-116
Injection
Code Injection
 Improper Encoding or Escaping of Output 		CVE-2026-8795 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
580 - - - A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We hav… New CWE-862
 Missing Authorization 		CVE-2026-26236 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm