Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196731 8.8 重要
Network
MODX - MODX Revolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-1000067 2017-08-8 16:55 2017-04-5 Show GitHub Exploit DB Packet Storm
196732 5.4 警告
Network
IBM - IBM Emptoris Sourcing におけるフィッシング攻撃を実行される脆弱性 CWE-601
オープンリダイレクト
CVE-2016-8953 2017-08-8 16:51 2016-10-25 Show GitHub Exploit DB Packet Storm
196733 5.4 警告
Network
IBM - IBM Emptoris Sourcing におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8948 2017-08-8 16:51 2016-10-25 Show GitHub Exploit DB Packet Storm
196734 6.1 警告
Network
OpenMediaVault - OpenMediaVault の rpc.php の Access Rights Management(Users) 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-1000065 2017-08-8 16:48 2017-03-17 Show GitHub Exploit DB Packet Storm
196735 9.8 緊急
Network
The PHP Group - PHP の ext/intl/msgformat/msgformat_parse.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-11362 2017-08-8 16:47 2017-06-2 Show GitHub Exploit DB Packet Storm
196736 7.5 重要
Adjacent
IBM - IBM Tivoli Monitoring Portal における Portal Server の SQL コマンドを変更される脆弱性 CWE-89
SQLインジェクション
CVE-2017-1183 2017-08-8 16:40 2017-07-10 Show GitHub Exploit DB Packet Storm
196737 7.5 重要
Adjacent
IBM - IBM Tivoli Monitoring Portal におけるシステム上で任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2017-1182 2017-08-8 16:40 2017-07-10 Show GitHub Exploit DB Packet Storm
196738 7 重要
Local
IBM - IBM Tivoli Monitoring Portal クライアントにおける昇格された権限を取得される脆弱性 CWE-200
情報漏えい
CVE-2017-1181 2017-08-8 16:40 2017-07-10 Show GitHub Exploit DB Packet Storm
196739 6.1 警告
Network
The GetSimple Team - GetSimple CMS における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-1000057 2017-08-8 16:39 2017-07-17 Show GitHub Exploit DB Packet Storm
196740 9.8 緊急
Network
rbenv - rbenv におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-1000047 2017-08-8 16:21 2017-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221 5.9 MEDIUM
Network
- - LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private … New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-57943 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
222 5.3 MEDIUM
Network
- - LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof client IP addresses by… New CWE-348
 Use of Less Trusted Source
CVE-2026-57942 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
223 10.0 CRITICAL
Network
- - Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue affects OMGF Pro: from n/a through 5.2.6. Update CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-57700 2026-06-30 03:16 2026-06-26 Show GitHub Exploit DB Packet Storm
224 6.5 MEDIUM
Network
- - Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-o… New CWE-522
 Insufficiently Protected Credentials
CVE-2026-56783 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
225 9.8 CRITICAL
Network
- - Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_… New CWE-306
Missing Authentication for Critical Function
CVE-2026-56782 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
226 5.3 MEDIUM
Network
- - Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projectio… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-56781 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
227 7.5 HIGH
Network
- - Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/password/ endpoint that allows domain administrators to change any user's password. At… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-56780 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
228 8.6 HIGH
Network
- - Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute valid HMACs for arbit… New CWE-918
CWE-1188
Server-Side Request Forgery (SSRF) 
 Insecure Default Initialization of Resource
CVE-2026-56285 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
229 7.1 HIGH
Network
- - Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions. Update CWE-79
Cross-site Scripting
CVE-2026-56051 2026-06-30 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
230 9.8 CRITICAL
Network
- - Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 versions. Update CWE-266
 Incorrect Privilege Assignment
CVE-2026-56028 2026-06-30 03:16 2026-06-27 Show GitHub Exploit DB Packet Storm