Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215971 4.3 警告 Pods Foundation, Inc - WordPress 用 Pods プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7956 2015-01-19 16:33 2014-12-30 Show GitHub Exploit DB Packet Storm
215972 3.5 注意 レッドハット - Spacewalk および Red Hat Network Satellite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7812 2015-01-19 16:15 2014-12-11 Show GitHub Exploit DB Packet Storm
215973 3.5 注意 レッドハット - Spacewalk および Red Hat Network Satellite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7811 2015-01-19 16:11 2014-10-24 Show GitHub Exploit DB Packet Storm
215974 5 警告 レッドハット - Red Hat JBoss Data Virtualization で使用される Odata4j の StaxXMLFactoryProvider2 における XML 外部エンティティの脆弱性 CWE-Other
その他
CVE-2014-0171 2015-01-19 16:06 2014-07-11 Show GitHub Exploit DB Packet Storm
215975 4.3 警告 F5 Networks - F5 BIG-IP Application Security Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1050 2015-01-19 16:00 2015-01-12 Show GitHub Exploit DB Packet Storm
215976 4.3 警告 e107.org - e107 の e107_admin/filemanager.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1041 2015-01-19 15:54 2015-01-3 Show GitHub Exploit DB Packet Storm
215977 3.5 注意 BEdita - BEdita の管理バックエンドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1040 2015-01-19 15:50 2015-01-8 Show GitHub Exploit DB Packet Storm
215978 4.3 警告 zfcuser project - ZF-Commons ZfcUser の user/login.phtml におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1039 2015-01-19 15:27 2015-01-8 Show GitHub Exploit DB Packet Storm
215979 6.4 警告 Novell
SUSE
- gcab の libgcab/gcab-folder.c の gcab_folder_extract 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-0552 2015-01-19 15:22 2015-01-5 Show GitHub Exploit DB Packet Storm
215980 5 警告 シスコシステムズ - Cisco WebEx Meeting Center における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-0583 2015-01-19 15:03 2015-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
431 5.1 MEDIUM
Local
imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion an out of bounds over-… New CWE-125
CWE-129
Out-of-bounds Read
 Improper Validation of Array Index
CVE-2026-45624 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
432 5.7 MEDIUM
Local
imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value could result in… New CWE-125
CWE-129
Out-of-bounds Read
 Improper Validation of Array Index
CVE-2026-45359 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
433 5.3 MEDIUM
Network
imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bo… New CWE-125
CWE-193
Out-of-bounds Read
 Off-by-one Error
CVE-2026-45358 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
434 6.1 MEDIUM
Network
svelte svelte Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML … Update CWE-79
Cross-site Scripting
CVE-2026-42599 2026-06-12 03:41 2026-06-10 Show GitHub Exploit DB Packet Storm
435 5.3 MEDIUM
Network
imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible… New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-45031 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
436 5.1 MEDIUM
Local
imagemagick imagemagick ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could … New CWE-125
CWE-191
Out-of-bounds Read
 Integer Underflow (Wrap or Wraparound)
CVE-2026-42326 2026-06-12 03:41 2026-06-11 Show GitHub Exploit DB Packet Storm
437 5.5 MEDIUM
Local
microsoft windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025
Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. Update CWE-125
Out-of-bounds Read
CVE-2026-45604 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
438 8.4 HIGH
Local
microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. Update CWE-843
Type Confusion
CVE-2026-45456 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
439 7.8 HIGH
Local
microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Update CWE-122
Heap-based Buffer Overflow
CVE-2026-44824 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm
440 5.5 MEDIUM
Local
microsoft 365_apps
microsoft_365
office_2016
office_2019
office_2021
office_2024
sharepoint_server
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Update CWE-125
Out-of-bounds Read
CVE-2026-44821 2026-06-12 03:40 2026-06-10 Show GitHub Exploit DB Packet Storm