Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211611 5 警告 Codologic.com - FreiChat の server/plugins/chatroom/chatroom.php の get_messages 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-6512 2015-08-24 14:03 2015-07-13 Show GitHub Exploit DB Packet Storm
211612 7.5 危険 Powerplay Gallery project - WordPress 用 Powerplay Gallery プラグインの upload.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-5681 2015-08-24 13:55 2015-06-27 Show GitHub Exploit DB Packet Storm
211613 7.5 危険 Powerplay Gallery project - WordPress 用 Powerplay Gallery プラグインの upload.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-5599 2015-08-24 13:55 2015-06-27 Show GitHub Exploit DB Packet Storm
211614 4.3 警告 Modern Tribe Inc. - WordPress 用 Modern Tribe Eventbrite Tickets プラグインの Event Import ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-5485 2015-08-24 13:55 2015-07-9 Show GitHub Exploit DB Packet Storm
211615 10 危険 Dedicated Micros - Dedicated Micros のデジタルビデオレコーダが、平文で通信し、パスワード認証をしていない問題 CWE-Other
その他 		CVE-2015-2909 2015-08-24 13:53 2015-08-20 Show GitHub Exploit DB Packet Storm
211616 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6511 2015-08-24 11:40 2015-06-16 Show GitHub Exploit DB Packet Storm
211617 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6510 2015-08-24 11:40 2015-06-16 Show GitHub Exploit DB Packet Storm
211618 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6509 2015-08-24 11:40 2015-06-16 Show GitHub Exploit DB Packet Storm
211619 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6508 2015-08-24 11:40 2015-06-16 Show GitHub Exploit DB Packet Storm
211620 4.3 警告 Electric Sheep Fencing - pfSense の WebGUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-4029 2015-08-24 10:52 2015-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this security feature inadv… New CWE-20
 Improper Input Validation  		CVE-2026-50628 2026-06-12 22:08 2026-06-12 Show GitHub Exploit DB Packet Storm
482 8.1 HIGH
Network 		qnap file_station A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-26239 2026-06-12 21:53 2026-06-10 Show GitHub Exploit DB Packet Storm
483 9.1 CRITICAL
Network 		qnap file_station A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vul… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-26240 2026-06-12 21:52 2026-06-10 Show GitHub Exploit DB Packet Storm
484 9.1 CRITICAL
Network 		qnap file_station A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vul… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-26241 2026-06-12 21:51 2026-06-10 Show GitHub Exploit DB Packet Storm
485 10.0 CRITICAL
Network 		ivanti standalone_sentry An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution Update CWE-78
OS Command  		CVE-2026-10520 2026-06-12 21:42 2026-06-10 Show GitHub Exploit DB Packet Storm
486 5.5 MEDIUM
Local 		apple macos A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data. New CWE-22
Path Traversal 		CVE-2025-24268 2026-06-12 21:38 2026-06-12 Show GitHub Exploit DB Packet Storm
487 8.8 HIGH
Local 		apple macos This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox. New CWE-693
 Protection Mechanism Failure 		CVE-2025-24284 2026-06-12 21:38 2026-06-12 Show GitHub Exploit DB Packet Storm
488 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information. New CWE-693
 Protection Mechanism Failure 		CVE-2025-30431 2026-06-12 21:38 2026-06-12 Show GitHub Exploit DB Packet Storm
489 5.5 MEDIUM
Local 		apple macos A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data. New CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor 		CVE-2025-30459 2026-06-12 21:37 2026-06-12 Show GitHub Exploit DB Packet Storm
490 7.8 HIGH
Local 		apple macos The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges. New CWE-269
 Improper Privilege Management 		CVE-2025-31272 2026-06-12 21:37 2026-06-12 Show GitHub Exploit DB Packet Storm