Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211561	6	警告	ヒューレット・パッカード	-	HP System Management Homepage におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-2134	2015-07-24 10:47	2015-07-20	Show	GitHub Exploit DB Packet Storm

211562	4.3	警告	Kaseya	-	Kaseya Virtual System Administrator におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2015-2863	2015-07-24 09:59	2015-07-13	Show	GitHub Exploit DB Packet Storm

211563	4	警告	Kaseya	-	Kaseya Virtual System Administrator におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2015-2862	2015-07-24 09:48	2015-07-13	Show	GitHub Exploit DB Packet Storm

211564	5	警告	ジュニパーネットワークス	-	Juniper Junos OS の IPv6 sendd におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-5360	2015-07-24 09:39	2015-07-22	Show	GitHub Exploit DB Packet Storm

211565	5	警告	ジュニパーネットワークス	-	複数の Juniper スイッチ製品の Junos OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-5357	2015-07-24 09:39	2015-07-22	Show	GitHub Exploit DB Packet Storm

211566	9.3	危険	Eaton	-	Eaton Cooper Power System Form 6 Control および Idea/IdeaPLUS Relays 上で稼働する ProView における TCP セッションを偽装される脆弱性	CWE-Other その他	CVE-2014-9196	2015-07-23 18:35	2014-12-2	Show	GitHub Exploit DB Packet Storm

211567	9	危険	シトリックス・システムズ	-	Citrix NetScaler Application Delivery Controller および NetScaler Gateway の Management Interface における任意の shell コマンドを実行される脆弱性	CWE-Other その他	CVE-2015-5080	2015-07-23 17:29	2015-06-3	Show	GitHub Exploit DB Packet Storm

211568	4.3	警告	シスコシステムズ	-	Cisco Adaptive Security Appliance ソフトウェアなどの製品に同梱されている Cavium 暗号モジュールのファームウェアの TLS の実装における TLS コンテンツになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2015-4458	2015-07-23 17:07	2015-07-14	Show	GitHub Exploit DB Packet Storm

211569	5	警告	シスコシステムズ	-	ASR 9000 デバイス上で稼働する Cisco IOS XR の Concurrent Data Management Replication プロセスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-4284	2015-07-23 17:07	2015-07-21	Show	GitHub Exploit DB Packet Storm

211570	6.8	警告	シスコシステムズ	-	Cisco WebEx Meetings Server におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-4281	2015-07-23 17:06	2015-07-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3371	7.2	HIGH Network	-	-	The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpoints in all version…	CWE-79 Cross-site Scripting	CVE-2026-3375	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3372	6.4	MEDIUM Network	-	-	The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missi…	CWE-862 Missing Authorization	CVE-2026-3897	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3373	7.2	HIGH Network	-	-	The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the plugin using the BladeOne templating engine's runStri…	CWE-94 Code Injection	CVE-2026-6169	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3374	4.9	MEDIUM Network	-	-	The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.4.5 due to in…	CWE-89 SQL Injection	CVE-2026-7618	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3375	6.4	MEDIUM Network	-	-	The Github Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repo' shortcode attribute in the 'github' shortcode in all versions up to, and including, 0.1 due to in…	CWE-79 Cross-site Scripting	CVE-2026-8042	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3376	7.2	HIGH Network	-	-	The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb_country_iso', 'hb_usa_state_iso', and 'hb_canada_province_iso' parameters in all versions up to, and including,…	CWE-79 Cross-site Scripting	CVE-2026-8143	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3377	6.1	MEDIUM Network	-	-	The WP Promoter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or incorrect nonce validation on a function. This ma…	CWE-352 Origin Validation Error	CVE-2026-8906	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3378	8.8	HIGH Network	-	-	The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due…	CWE-94 Code Injection	CVE-2026-8832	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3379	4.3	MEDIUM Network	-	-	The MetaMagic SEO Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce validation on the metama…	CWE-352 Origin Validation Error	CVE-2026-8942	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

3380	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RiceTheme Felan Framework allows Reflected XSS. This issue affects Felan Framework: from n/a thr…	CWE-79 Cross-site Scripting	CVE-2025-22741	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm