Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208471	6.8	警告	アップル	-	Apple iOS および OS X の FontParser における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2015-6978	2015-12-16 17:48	2015-10-21	Show	GitHub Exploit DB Packet Storm

208472	4.3	警告	シスコシステムズ	-	Cisco Model EPC3928 with EDVA デバイスの管理インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-6402	2015-12-16 17:45	2015-12-8	Show	GitHub Exploit DB Packet Storm

208473	7.5	危険	シスコシステムズ	-	Cisco Model EPC3928 with EDVA デバイスにおける認証要求を回避される脆弱性	CWE-287 不適切な認証	CVE-2015-6401	2015-12-16 17:40	2015-12-8	Show	GitHub Exploit DB Packet Storm

208474	6.8	警告	シスコシステムズ	-	Cisco Model DPQ3925 with EDVA デバイスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-6378	2015-12-16 16:44	2015-12-8	Show	GitHub Exploit DB Packet Storm

208475	4.3	警告	シスコシステムズ	-	Cisco Small Business RV ルータおよび SA500 Security Appliance 上で稼動する乱数生成器における TLS 鍵ペアを特定される脆弱性	CWE-200 情報漏えい	CVE-2015-6418	2015-12-16 16:43	2015-12-10	Show	GitHub Exploit DB Packet Storm

208476	4	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager のセルフサービスアプリケーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-6422	2015-12-16 15:13	2015-12-11	Show	GitHub Exploit DB Packet Storm

208477	4.3	警告	シスコシステムズ	-	Cisco Unified Email Interaction Manager and Unified Web Interaction Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-6416	2015-12-16 15:13	2015-12-10	Show	GitHub Exploit DB Packet Storm

208478	4	警告	シスコシステムズ	-	Cisco Unified Communications Manager の Mobile and Remote Access サービスの実装における電話受信および電話設定の制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2015-6410	2015-12-16 15:13	2015-12-9	Show	GitHub Exploit DB Packet Storm

208479	6.5	警告	シスコシステムズ	-	Cisco Videoscape Distribution Suite Service Manager におけるデータベースエントリを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-6417	2015-12-16 11:27	2015-12-10	Show	GitHub Exploit DB Packet Storm

208480	7.1	危険	シスコシステムズ	-	Cisco Fabric Interconnect 6200 デバイス上で稼動する Unified Computing System におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-6415	2015-12-16 11:27	2015-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3371	7.2	HIGH Network	-	-	The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpoints in all version…	CWE-79 Cross-site Scripting	CVE-2026-3375	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3372	6.4	MEDIUM Network	-	-	The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missi…	CWE-862 Missing Authorization	CVE-2026-3897	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3373	7.2	HIGH Network	-	-	The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the plugin using the BladeOne templating engine's runStri…	CWE-94 Code Injection	CVE-2026-6169	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3374	4.9	MEDIUM Network	-	-	The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.4.5 due to in…	CWE-89 SQL Injection	CVE-2026-7618	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3375	6.4	MEDIUM Network	-	-	The Github Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repo' shortcode attribute in the 'github' shortcode in all versions up to, and including, 0.1 due to in…	CWE-79 Cross-site Scripting	CVE-2026-8042	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3376	7.2	HIGH Network	-	-	The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb_country_iso', 'hb_usa_state_iso', and 'hb_canada_province_iso' parameters in all versions up to, and including,…	CWE-79 Cross-site Scripting	CVE-2026-8143	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3377	6.1	MEDIUM Network	-	-	The WP Promoter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or incorrect nonce validation on a function. This ma…	CWE-352 Origin Validation Error	CVE-2026-8906	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3378	8.8	HIGH Network	-	-	The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due…	CWE-94 Code Injection	CVE-2026-8832	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3379	4.3	MEDIUM Network	-	-	The MetaMagic SEO Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce validation on the metama…	CWE-352 Origin Validation Error	CVE-2026-8942	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3380	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RiceTheme Felan Framework allows Reflected XSS. This issue affects Felan Framework: from n/a thr…	CWE-79 Cross-site Scripting	CVE-2025-22741	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm