Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 2:06 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
213581	4.3	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における AWT に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5849	2015-03-17 17:27	2013-10-15	Show	GitHub Exploit DB Packet Storm

213582	9.3	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5832	2015-03-17 17:26	2013-10-15	Show	GitHub Exploit DB Packet Storm

213583	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における CORBA に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5814	2015-03-17 17:25	2013-10-15	Show	GitHub Exploit DB Packet Storm

213584	9.3	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5850	2015-03-17 17:25	2013-10-15	Show	GitHub Exploit DB Packet Storm

213585	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における JNDI に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5817	2015-03-17 17:24	2013-10-15	Show	GitHub Exploit DB Packet Storm

213586	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5818	2015-03-17 17:24	2013-10-15	Show	GitHub Exploit DB Packet Storm

213587	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5840	2015-03-17 17:23	2013-10-15	Show	GitHub Exploit DB Packet Storm

213588	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5842	2015-03-17 17:23	2013-10-15	Show	GitHub Exploit DB Packet Storm

213589	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	複数の Oracle Java 製品における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5843	2015-03-17 17:22	2013-10-15	Show	GitHub Exploit DB Packet Storm

213590	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5819	2015-03-17 17:22	2013-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2971	7.5	HIGH Network	-	-	Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Coupons for WooCommer…	CWE-862 Missing Authorization	CVE-2026-45438	2026-05-27 04:31	2026-05-26	Show	GitHub Exploit DB Packet Storm

2972	8.5	HIGH Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elemen…	CWE-89 SQL Injection	CVE-2026-48837	2026-05-27 04:31	2026-05-26	Show	GitHub Exploit DB Packet Storm

2973	6.3	MEDIUM Network	-	-	A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGST_Invoice.php of the component Invoice Generation Handler…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-9411	2026-05-27 04:26	2026-05-25	Show	GitHub Exploit DB Packet Storm

2974	6.3	MEDIUM Network	-	-	A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead to improper access c…	CWE-266 CWE-284 Incorrect Privilege Assignment Improper Access Control	CVE-2026-9412	2026-05-27 04:26	2026-05-25	Show	GitHub Exploit DB Packet Storm

2975	4.3	MEDIUM Network	-	-	A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of the argument msg lea…	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-9413	2026-05-27 04:26	2026-05-25	Show	GitHub Exploit DB Packet Storm

2976	3.5	LOW Network	-	-	A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice …	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-9414	2026-05-27 04:26	2026-05-25	Show	GitHub Exploit DB Packet Storm

2977	4.7	MEDIUM Network	-	-	A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET Parameter Handler.…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-9444	2026-05-27 04:26	2026-05-25	Show	GitHub Exploit DB Packet Storm

2978	6.3	MEDIUM Network	-	-	A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Impacted is an unknown function of the file /admin/addproduct.php of the component File Extension Handler. This manipulati…	CWE-284 CWE-434 Improper Access Control Unrestricted Upload of File with Dangerous Type	CVE-2026-9445	2026-05-27 04:26	2026-05-25	Show	GitHub Exploit DB Packet Storm

2979	7.3	HIGH Network	-	-	A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0. The impacted element is an unknown function of the file /user/search.php. Performing a manipulation of the argument Na…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-9447	2026-05-27 04:26	2026-05-25	Show	GitHub Exploit DB Packet Storm

2980	8.1	HIGH Network	-	-	Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.	CWE-89 SQL Injection	CVE-2026-48842	2026-05-27 04:26	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed