Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1891	5.5	警告 Local	X.Org Foundation レッドハット	X.Org X Server xwayland Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-50262	2026-06-16 13:35	2026-06-5	Show	GitHub Exploit DB Packet Storm

1892	7.8	重要 Local	マイクロソフト	Microsoft PC Manager	Microsoft PC Manager の特権昇格の脆弱性	CWE-59 リンク解釈の問題	CVE-2026-50511	2026-06-16 13:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

1893	7.8	重要 Local	マイクロソフト	Microsoft PC Manager	Microsoft PC Manager の特権昇格の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-50512	2026-06-16 13:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

1894	9.1	緊急 Network	Apache Software Foundation	Apache CXF	Apache Software FoundationのApache CXFにおける代替名による認証回避に関する脆弱性	CWE-289 代替名による認証回避	CVE-2026-50627	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

1895	9.8	緊急 Network	Apache Software Foundation	Apache CXF	Apache Software FoundationのApache CXFにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-50628	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

1896	7.8	重要 Local	Vim	Vim	Vimにおける複数の脆弱性	CWE-829 CWE-94 CWE-95	CVE-2026-52858	2026-06-16 13:35	2026-06-11	Show	GitHub Exploit DB Packet Storm

1897	8.2	重要 Network	Vim	Vim	Vimにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-52859	2026-06-16 13:35	2026-06-11	Show	GitHub Exploit DB Packet Storm

1898	7.8	重要 Local	Vim	Vim	Vimにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-52860	2026-06-16 13:35	2026-06-11	Show	GitHub Exploit DB Packet Storm

1899	5.4	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-53441	2026-06-16 13:35	2026-06-10	Show	GitHub Exploit DB Packet Storm

1900	7.1	重要 Local	OpenClaw	OpenClaw	OpenClawにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-53832	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306551	-	dream-multimedia-tv	enigma2_webinterface	Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.	CWE-22 Path Traversal	CVE-2012-1024	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306552	-	4homepages	4images	Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter.	CWE-20 Improper Input Validation	CVE-2012-1023	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306553	-	4homepages	4images	SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action.	CWE-89 SQL Injection	CVE-2012-1022	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306554	-	4homepages	4images	Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action.	CWE-79 Cross-site Scripting	CVE-2012-1021	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306555	-	overseaswtc	nexorone_online_banking_system	Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the (1) visitor_language parameter to reg…	CWE-79 Cross-site Scripting	CVE-2012-1020	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306556	-	xwiki	xwiki_enterprise	Multiple cross-site scripting (XSS) vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) XWiki.XWikiComments_comment parameter to xwiki/bi…	CWE-79 Cross-site Scripting	CVE-2012-1019	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306557	-	dmackmedia	mod_currencyconverter	Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconverter) module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web sc…	CWE-79 Cross-site Scripting	CVE-2012-1018	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306558	-	secureideas	base	Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary SQL commands via the (1) ip_addr[0][1], (2) …	CWE-89 SQL Injection	CVE-2012-1017	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306559	-	likno	allwebmenus_plugin	actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a cert…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-1011	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

306560	-	likno	allwebmenus_plugin	Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a P…	CWE-20 Improper Input Validation	CVE-2012-1010	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed