Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210301 9.3 危険 オラクル - Oracle Sun Systems Products Suite の Integrated Lights Out Manager における Web に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4821 2015-10-23 10:19 2015-10-20 Show GitHub Exploit DB Packet Storm
210302 6.2 警告 オラクル - Oracle Sun Solaris における Solaris Kernel Zones に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4820 2015-10-23 10:18 2015-10-20 Show GitHub Exploit DB Packet Storm
210303 6.2 警告 オラクル - Oracle Sun Solaris における Kernel Zones virtualized NIC driver に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4817 2015-10-23 10:18 2015-10-20 Show GitHub Exploit DB Packet Storm
210304 2.1 注意 オラクル - Oracle Sun Solaris における Solaris Kernel Zones に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4801 2015-10-23 10:18 2015-10-20 Show GitHub Exploit DB Packet Storm
210305 4.4 警告 オラクル - Oracle Sun Solaris における Gzip に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-2642 2015-10-23 10:18 2015-10-20 Show GitHub Exploit DB Packet Storm
210306 2.1 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4896 2015-10-23 10:16 2015-10-20 Show GitHub Exploit DB Packet Storm
210307 4.9 警告 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4856 2015-10-23 10:16 2015-10-20 Show GitHub Exploit DB Packet Storm
210308 4.9 警告 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4813 2015-10-23 10:16 2015-10-20 Show GitHub Exploit DB Packet Storm
210309 4.3 警告 オラクル - Oracle Communications Applications の Oracle Communications Convergence における Mail Proxy に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4793 2015-10-23 09:51 2015-10-20 Show GitHub Exploit DB Packet Storm
210310 10 危険 オラクル - Oracle Communications Applications の 複数のコンポーネントにおける PMAC に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-2608 2015-10-23 09:51 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2861 4.0 MEDIUM
Local 		- - Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that allows unauthenticated attackers to include arbitrary files by exploiting unsanit… CWE-22
Path Traversal 		CVE-2019-25734 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2862 8.4 HIGH
Local 		- - AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Att… CWE-120
Classic Buffer Overflow 		CVE-2019-25735 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2863 8.4 HIGH
Local 		- - LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the Host IP field. Attackers can craft a… CWE-120
Classic Buffer Overflow 		CVE-2019-25736 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2864 9.8 CRITICAL
Network 		- - WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option actio… CWE-306
Missing Authentication for Critical Function 		CVE-2019-25738 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2865 6.5 MEDIUM
Network 		- - Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requ… CWE-22
Path Traversal 		CVE-2019-25740 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2866 9.8 CRITICAL
Network 		- - Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to execute arbitrary code… CWE-120
Classic Buffer Overflow 		CVE-2019-25741 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2867 8.2 HIGH
Network 		- - WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… CWE-89
SQL Injection 		CVE-2019-25745 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2868 7.3 HIGH
Network 		- - A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the component Administrat… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10704 2026-06-4 23:58 2026-06-3 Show GitHub Exploit DB Packet Storm
2869 7.3 HIGH
Network 		- - A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads to sql injection. … CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10607 2026-06-4 23:56 2026-06-3 Show GitHub Exploit DB Packet Storm
2870 7.3 HIGH
Network 		- - A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results in sql injection. … CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10608 2026-06-4 23:56 2026-06-3 Show GitHub Exploit DB Packet Storm