Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210641 5 警告 OpenJPEG project - OpenJPEG における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-6052 2015-08-10 11:43 2013-12-3 Show GitHub Exploit DB Packet Storm
210642 7.5 危険 OpenJPEG project - OpenJPEG におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-6054 2015-08-10 11:42 2013-12-3 Show GitHub Exploit DB Packet Storm
210643 5 警告 OpenStack - OpenStack Nova および Neutron における重要なメタデータを取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-6419 2015-08-10 11:40 2013-12-11 Show GitHub Exploit DB Packet Storm
210644 6.5 警告 PostgreSQL.org
アップル
富士通		 - PostgreSQL の path_in 関数およびその他の不特定の関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-0064 2015-08-10 11:38 2014-02-20 Show GitHub Exploit DB Packet Storm
210645 6.5 警告 PostgreSQL.org
アップル
富士通		 - PostgreSQL における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0061 2015-08-10 11:38 2014-02-20 Show GitHub Exploit DB Packet Storm
210646 4 警告 PostgreSQL.org
アップル
富士通		 - PostgreSQL におけるロールに任意のユーザを追加または削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0060 2015-08-10 11:38 2014-02-20 Show GitHub Exploit DB Packet Storm
210647 6.4 警告 Ruby on Rails project - Ruby on Rails の actionpack/lib/action_dispatch/http/request.rb におけるデータベースクエリの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6417 2015-08-10 11:38 2013-12-3 Show GitHub Exploit DB Packet Storm
210648 4.3 警告 Ruby on Rails project - Ruby on Rails の implicit-render の実装におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-0130 2015-08-10 11:33 2014-05-6 Show GitHub Exploit DB Packet Storm
210649 4.3 警告 FFmpeg - FFmpeg の libavcodec/g2meet.c の kempf_decode_tile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-4264 2015-08-10 11:31 2013-08-7 Show GitHub Exploit DB Packet Storm
210650 6.8 警告 IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Maintenance に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5879 2015-08-10 11:13 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2481 8.2 HIGH
Network 		- - Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the release_id parameter of board… CWE-89
SQL Injection 		CVE-2018-25394 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2482 8.2 HIGH
Network 		- - Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the feature_id parameter of board… CWE-89
SQL Injection 		CVE-2018-25395 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2483 5.3 MEDIUM
Network 		- - PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms. Attackers can trick authenticated … CWE-352
 Origin Validation Error 		CVE-2018-25397 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2484 8.8 HIGH
Network 		- - A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub_9068 of the file tomatoups.cgi of the component UPS Service. The manipulation leads to stac… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-10066 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2485 8.8 HIGH
Network 		- - A vulnerability was detected in Shibby Tomato 1.28. Impacted is the function sub_90F0 of the file multimon.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched rem… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-10067 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2486 - - - QuickCMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID f… CWE-384
 Session Fixation 		CVE-2026-33384 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2487 - - - QuickCMS is vulnerable to Cross-Site Scripting (XSS) through its insecure HTTP-based plugin‑fetching mechanism. A malicious attacker can perform a Man‑in‑the‑Middle (MITM) attack by impersonating the… CWE-79
Cross-site Scripting 		CVE-2026-33386 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2488 9.9 CRITICAL
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command injection vulnerability exists in the Docker file upload functionality. When an authenticated user uplo… CWE-77
Command Injection 		CVE-2026-45663 2026-05-30 01:29 2026-05-30 Show GitHub Exploit DB Packet Storm
2489 8.8 HIGH
Network 		google chrome Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free 		CVE-2026-9947 2026-05-30 01:29 2026-05-29 Show GitHub Exploit DB Packet Storm
2490 8.3 HIGH
Network 		google chrome Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTM… CWE-416
 Use After Free 		CVE-2026-9949 2026-05-30 01:28 2026-05-29 Show GitHub Exploit DB Packet Storm