Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192851 7.5 重要
Network 		Joomla! - Joomla! における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-9933 2017-08-8 11:45 2017-07-4 Show GitHub Exploit DB Packet Storm
192852 6.1 警告
Network 		Mikko Saari - WordPress 用 Relevanssi プラグインにおける格納型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-1000038 2017-08-8 11:16 2017-02-28 Show GitHub Exploit DB Packet Storm
192853 6.1 警告
Network 		LogicalDoc - LogicalDoc CommunityEdition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-1000023 2017-08-7 18:54 2017-07-17 Show GitHub Exploit DB Packet Storm
192854 9.8 緊急
Network 		LogicalDoc - LogicalDoc CommunityEdition におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-1000022 2017-08-7 18:54 2017-07-17 Show GitHub Exploit DB Packet Storm
192855 9.8 緊急
Network 		LogicalDoc - LogicalDoc CommunityEdition における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2017-1000021 2017-08-7 18:53 2017-07-17 Show GitHub Exploit DB Packet Storm
192856 7.5 重要
Network 		Dominik Reichl - KeePass のエントリ詳細表示機能における重要な情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2017-1000066 2017-08-7 18:17 2017-07-17 Show GitHub Exploit DB Packet Storm
192857 6.1 警告
Network 		Live Helper Chat - Live Helper Chat の HTTP ヘッダの処理におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-1000059 2017-08-7 18:17 2017-04-28 Show GitHub Exploit DB Packet Storm
192858 6.1 警告
Network 		Chevereto Software - chevereto CMS における格納型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-1000058 2017-08-7 18:17 2017-07-17 Show GitHub Exploit DB Packet Storm
192859 6.1 警告
Network 		oauth2_proxy project - Bitly oauth2_proxy におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2017-1000070 2017-08-7 18:16 2017-03-29 Show GitHub Exploit DB Packet Storm
192860 8.8 重要
Network 		oauth2_proxy project - Bitly oauth2_proxy におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-1000069 2017-08-7 18:16 2017-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2791 6.5 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affects Geo Mashup: from n/a through 1.13.18. CWE-79
Cross-site Scripting 		CVE-2026-27427 2026-05-26 18:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2792 4.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121. CWE-862
 Missing Authorization 		CVE-2026-24638 2026-05-26 18:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2793 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey… CWE-862
 Missing Authorization 		CVE-2026-24590 2026-05-26 18:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2794 7.5 HIGH
Network 		- - The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw t… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-8047 2026-05-26 17:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2795 8.1 HIGH
Network 		- - The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including tho… CWE-863
 Incorrect Authorization 		CVE-2026-8046 2026-05-26 17:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2796 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7. CWE-862
 Missing Authorization 		CVE-2026-39655 2026-05-26 17:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2797 4.6 MEDIUM
Physics 		- - Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules), Hitachi Ops Center Analyzer viewpoint… CWE-549
 Missing Password Field Masking 		CVE-2026-3314 2026-05-26 16:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2798 3.3 LOW
Local 		- - A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulati… CWE-404
CWE-476
 Improper Resource Shutdown or Release
 NULL Pointer Dereference 		CVE-2026-9529 2026-05-26 14:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2799 7.3 HIGH
Network 		- - A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /admin/delete_judge.php. Such manipulation of the argument judge_id leads to … CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9528 2026-05-26 14:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2800 4.3 MEDIUM
Network 		- - A vulnerability was determined in itsourcecode Electronic Judging System 1.0. This issue affects some unknown processing of the file /admin/judges.php. This manipulation of the argument fname causes … CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-9527 2026-05-26 14:16 2026-05-26 Show GitHub Exploit DB Packet Storm