Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195051	4.3	警告 Network	サイボウズ	-	サイボウズガルーンにおける情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2017-2093	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195052	5.4	警告 Network	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2092	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195053	4.3	警告 Network	サイボウズ	-	サイボウズガルーンの電話メモ機能におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-2091	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195054	6.3	警告 Network	サイボウズ	-	サイボウズガルーンにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-2090	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195055	6.8	警告 Adjacent	バッファロー	-	WNC01WH における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2017-2152	2017-06-1 13:51	2017-04-21	Show	GitHub Exploit DB Packet Storm

195056	6.1	警告 Network	wpdevelop	-	WordPress 用プラグイン Booking Calendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2151	2017-06-1 13:51	2017-04-20	Show	GitHub Exploit DB Packet Storm

195057	5.8	警告 Network	wpdevelop	-	WordPress 用プラグイン Booking Calendar におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-2150	2017-06-1 13:51	2017-04-20	Show	GitHub Exploit DB Packet Storm

195058	4.3	警告 Adjacent	株式会社アイ・オー・データ機器	-	WN-AC1167GR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2148	2017-06-1 13:51	2017-04-14	Show	GitHub Exploit DB Packet Storm

195059	6.1	警告 Network	WP Statistics	-	WordPress 用プラグイン WP Statistics におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2147	2017-06-1 13:51	2017-04-13	Show	GitHub Exploit DB Packet Storm

195060	8.8	重要 Adjacent	株式会社アイ・オー・データ機器	-	WN-G300R3 におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-2142	2017-06-1 13:51	2017-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2381	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check public/private permissions which allows members without these permissions to access public playbooks via /get…	CWE-863 Incorrect Authorization	CVE-2026-6343	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2382	6.5	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a user via the use of som…	CWE-522 Insufficiently Protected Credentials	CVE-2026-6345	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2383	6.4	MEDIUM Network	-	-	Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows authenticated attackers to inject malicious HTML and JavaScript code. Attackers…	CWE-79 Cross-site Scripting	CVE-2021-47962	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

2384	7.2	HIGH Network	-	-	Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to execute arbitrary code by injecting malicious payloads into markdown files stored within the application. A…	CWE-79 Cross-site Scripting	CVE-2021-47963	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

2385	6.4	MEDIUM Network	-	-	Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_des…	CWE-79 Cross-site Scripting	CVE-2021-47968	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

2386	8.8	HIGH Network	-	-	HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-37227	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2387	7.8	HIGH Local	-	-	Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Atta…	CWE-428 Unquoted Search Path or Element	CVE-2020-37232	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2388	6.4	MEDIUM Network	-	-	Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user creation fields. Attackers can ins…	CWE-79 Cross-site Scripting	CVE-2020-37240	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2389	8.2	HIGH Network	-	-	Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parame…	CWE-89 SQL Injection	CVE-2020-37242	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2390	8.2	HIGH Network	-	-	Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl acti…	CWE-89 SQL Injection	CVE-2020-37243	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm