Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
214451 6.8 警告 PWGRandom project - WordPress 用 PWGRandom プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9394 2015-01-6 19:46 2014-12-9 Show GitHub Exploit DB Packet Storm
214452 6.8 警告 Post to Twitter project - WordPress 用 Post to Twitter プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9393 2015-01-6 19:46 2014-12-9 Show GitHub Exploit DB Packet Storm
214453 6.8 警告 PictoBrowser project - WordPress 用 PictoBrowser プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9392 2015-01-6 19:46 2014-12-9 Show GitHub Exploit DB Packet Storm
214454 6.8 警告 gSlideShow project - WordPress 用 gSlideShow プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9391 2015-01-6 19:45 2014-12-9 Show GitHub Exploit DB Packet Storm
214455 6.8 警告 Smoothwall - Smoothwall の httpd/cgi-bin/shutdown.cgi の Web 管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5284 2015-01-6 19:17 2011-01-16 Show GitHub Exploit DB Packet Storm
214456 4.3 警告 Smoothwall - Smoothwall の httpd/cgi-bin/ipinfo.cgi の Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5283 2015-01-6 19:12 2011-01-16 Show GitHub Exploit DB Packet Storm
214457 4.3 警告 TWiki - TWiki の lib/TWiki.pm の urlEncode 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9367 2015-01-6 18:53 2014-12-9 Show GitHub Exploit DB Packet Storm
214458 4.3 警告 TWiki - TWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9325 2015-01-6 18:49 2014-12-9 Show GitHub Exploit DB Packet Storm
214459 7.5 危険 miniBB - MiniBB の bb_func_unsub.php における SQL インジェクション攻撃を実行される脆弱性 CWE-89
SQLインジェクション
CVE-2014-9254 2015-01-6 18:41 2014-11-27 Show GitHub Exploit DB Packet Storm
214460 4.3 警告 JCE-Tech.com - JCE-Tech PHP Video Script の view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8752 2015-01-6 18:25 2014-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2801 7.3 HIGH
Network
- - A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the file /admin/edit_team.php. The manipulation of the argument num_id results in s… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9526 2026-05-26 14:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2802 7.3 HIGH
Network
- - A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /admin/edit_judge.php. The manipulation of the argument judge_id leads to sql in… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9525 2026-05-26 13:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2803 6.3 MEDIUM
Network
- - A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is the function execute of the component REST Endpoint. Executing a manipulation of the argument reportPa… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9524 2026-05-26 13:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2804 7.3 HIGH
Network
- - A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2. Affected by this vulnerability is an unknown functionality of the file /Subs… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9523 2026-05-26 13:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2805 7.3 HIGH
Network
- - A security vulnerability has been detected in fraillt bitsery up to 5.2.4. Affected is the function loadFromSharedState in the library include/bitsery/ext/std_smart_ptr.h. Such manipulation leads to … CWE-20
CWE-1287
 Improper Input Validation 
 Improper Validation of Specified Type of Input
CVE-2026-9521 2026-05-26 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2806 4.3 MEDIUM
Network
- - A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub. This impacts an unknown function of the file packages/generator/templates/app/src/app/auth/components/LoginForm.tsx of the comp… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9520 2026-05-26 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2807 4.3 MEDIUM
Network
- - A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0. This affects the function getServerSideProps of the file frontend/src/pages/auth/signIn.tsx of the component Sign-in Auto… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9519 2026-05-26 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2808 4.3 MEDIUM
Network
- - A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file view_students.php of the component Students Controller. T… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9518 2026-05-26 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2809 6.5 MEDIUM
Adjacent
- - A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0,  GS1200-5HPv3 firmware versions through 1.00(A… CWE-862
 Missing Authorization
CVE-2026-4795 2026-05-26 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2810 - - - The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provided for the optional 'Info conte… CWE-80
Basic XSS
CVE-2025-71310 2026-05-26 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm