Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211891 7.2 危険 アップル - Apple OS X のサンドボックスサブシステムにおける権限を取得される脆弱性 CWE-20
CWE-264
CVE-2015-5945 2015-10-27 13:43 2015-10-21 Show GitHub Exploit DB Packet Storm
211892 6.8 警告 アップル - Apple OS X の CoreText における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-5944 2015-10-27 13:43 2015-10-21 Show GitHub Exploit DB Packet Storm
211893 4.3 警告 アップル - Apple OS X の SecurityAgent におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-5943 2015-10-27 13:43 2015-10-21 Show GitHub Exploit DB Packet Storm
211894 6.8 警告 アップル - Apple OS X の ImageIO における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-5938 2015-10-27 13:43 2015-10-21 Show GitHub Exploit DB Packet Storm
211895 6.8 警告 アップル - Apple OS X のオーディオにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-5934 2015-10-27 13:43 2015-10-21 Show GitHub Exploit DB Packet Storm
211896 6.8 警告 アップル - Apple OS X のオーディオにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-5933 2015-10-27 13:43 2015-10-21 Show GitHub Exploit DB Packet Storm
211897 7.2 危険 アップル - Apple OS X のカーネルにおける権限を取得される脆弱性 CWE-Other
その他 		CVE-2015-5932 2015-10-27 13:43 2015-10-21 Show GitHub Exploit DB Packet Storm
211898 10 危険 アップル - Apple iOS および OS X のカーネルにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2015-6988 2015-10-27 12:15 2015-10-21 Show GitHub Exploit DB Packet Storm
211899 8.8 危険 アップル - Apple iOS および OS X におけるメモリ二重解放の脆弱性 CWE-Other
その他 		CVE-2015-6983 2015-10-27 12:10 2015-10-21 Show GitHub Exploit DB Packet Storm
211900 5.8 警告 アップル - Apple iOS および OS X の CFNetwork における Cookie を上書きされる脆弱性 CWE-Other
その他 		CVE-2015-7023 2015-10-27 11:59 2015-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4521 6.4 MEDIUM
Network 		- - The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all versions up to, and including, 2.3.23 due to insufficient input sanitization and o… CWE-79
Cross-site Scripting 		CVE-2026-10862 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4522 5.3 MEDIUM
Network 		- - A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege v… CWE-266
CWE-272
 Incorrect Privilege Assignment
 Least Privilege Violation 		CVE-2026-11620 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4523 4.7 MEDIUM
Network 		- - A weakness has been identified in Dcat-Admin up to 2.2.3-beta. This impacts the function editorMDUpload of the file /admin/dcat-api/editor-md/upload of the component User Setting Page. This manipulat… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-11621 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4524 6.4 MEDIUM
Network 		- - The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ parameter in all versions up to, and including, 4.1.8 due to insufficient input sanit… CWE-79
Cross-site Scripting 		CVE-2026-5714 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4525 7.2 HIGH
Network 		- - The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment text in all versions up to, and including, 7.5.49.7212 due to insufficient input sanit… CWE-79
Cross-site Scripting 		CVE-2026-7556 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4526 6.4 MEDIUM
Network 		- - The TinyMCE shortcode Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'btnrel' Shortcode Attribute in all versions up to, and including, 1.0.0 due to insufficient input sa… CWE-79
Cross-site Scripting 		CVE-2026-10024 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4527 4.3 MEDIUM
Network 		- - The jQuery Hover Footnotes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the jqFo… CWE-352
 Origin Validation Error 		CVE-2026-10553 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4528 6.4 MEDIUM
Network 		- - The jQuery Hover Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax) in all versions up to, and including, 1.4 due to insufficient in… CWE-79
Cross-site Scripting 		CVE-2026-10738 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4529 6.1 MEDIUM
Network 		- - The Product Filter Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'args[filterFormArray]' Parameter in all versions up to, and including, 1.0.6 due to i… CWE-79
Cross-site Scripting 		CVE-2026-11603 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4530 4.5 MEDIUM
Local 		- - A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c. Such manipulation leads to use after free. Local access is required to approach… CWE-119
CWE-416
Incorrect Access of Indexable Resource ('Range Error') 
 Use After Free 		CVE-2026-11623 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm