Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216551 4.9 警告 WordPress.org - WordPress の wp-includes/capabilities.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-5296 2014-01-22 18:43 2010-09-4 Show GitHub Exploit DB Packet Storm
216552 4.3 警告 WordPress.org - WordPress の wp-admin/plugins.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5295 2014-01-22 18:41 2010-11-14 Show GitHub Exploit DB Packet Storm
216553 4.3 警告 WordPress.org - WordPress の wp-admin/includes/file.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5294 2014-01-22 18:38 2010-11-14 Show GitHub Exploit DB Packet Storm
216554 5.8 警告 WordPress.org - WordPress の wp-includes/comment.php におけるスパム制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-5293 2014-01-22 18:35 2010-11-30 Show GitHub Exploit DB Packet Storm
216555 4.3 警告 シスコシステムズ - Cisco Secure Access Control System のポータルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0668 2014-01-22 16:37 2014-01-21 Show GitHub Exploit DB Packet Storm
216556 2.6 注意 TYPO3 Association - TYPO3 の Extbase Framework の ActionController ベースクラスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7078 2014-01-22 16:32 2013-12-10 Show GitHub Exploit DB Packet Storm
216557 3.3 注意 libimobiledevice - libimobiledevice の userpref.c における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2013-2142 2014-01-22 16:31 2013-08-14 Show GitHub Exploit DB Packet Storm
216558 2.6 注意 Drupal - Drupal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0244 2014-01-22 16:31 2013-01-16 Show GitHub Exploit DB Packet Storm
216559 2.7 注意 Fabrice Bellard
Xen プロジェクト
- Xen および QEMU の qemu-xen の qdisk PV ディスクバックエンドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4375 2014-01-22 16:22 2013-10-10 Show GitHub Exploit DB Packet Storm
216560 1.9 注意 Linux - Linux Kernel の drivers/net/hamradio/yam.c の yam_ioctl 関数における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1446 2014-01-22 16:05 2014-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261 7.3 HIGH
Network
- - A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Ha… New CWE-22
Path Traversal
CVE-2026-6568 2026-04-19 19:16 2026-04-19 Show GitHub Exploit DB Packet Storm
262 4.3 MEDIUM
Network
- - A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0. The impacted element is an unknown function of the component Session Handling. The manipulation results in improper authorization. It is … New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-6564 2026-04-19 19:16 2026-04-19 Show GitHub Exploit DB Packet Storm
263 8.8 HIGH
Network
- - A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoById of the file /goform/aspForm. The manipulation of the argument param leads to … New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-6563 2026-04-19 18:16 2026-04-19 Show GitHub Exploit DB Packet Storm
264 7.3 HIGH
Network
- - A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of the file /index/Search/index.html. Executing a manipulation of the argument keyword can lead to sql… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-6562 2026-04-19 18:16 2026-04-19 Show GitHub Exploit DB Packet Storm
265 4.7 MEDIUM
Network
- - A vulnerability was detected in EyouCMS up to 1.7.1. This issue affects the function edit_adminlogo of the file application/admin/controller/Index.php. Performing a manipulation of the argument filen… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-6561 2026-04-19 17:16 2026-04-19 Show GitHub Exploit DB Packet Storm
266 8.8 HIGH
Network
- - A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manipulation of the argument param l… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-6560 2026-04-19 16:16 2026-04-19 Show GitHub Exploit DB Packet Storm
267 4.3 MEDIUM
Network
- - A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scriptin… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-6559 2026-04-19 15:16 2026-04-19 Show GitHub Exploit DB Packet Storm
268 6.4 MEDIUM
Network
- - The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's calendly shortcode in all versions up to, and including, 4.4 due… New CWE-79
Cross-site Scripting
CVE-2026-0868 2026-04-19 13:16 2026-04-19 Show GitHub Exploit DB Packet Storm
269 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6056 2026-04-19 08:16 2026-04-19 Show GitHub Exploit DB Packet Storm
270 8.1 HIGH
Network
- - sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c. Update CWE-78
OS Command 
CVE-2026-41113 2026-04-19 06:16 2026-04-17 Show GitHub Exploit DB Packet Storm