Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218231 7.5 危険 VLD Interactive - vldPersonals における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9005 2014-11-21 11:55 2014-11-10 Show GitHub Exploit DB Packet Storm
218232 4.3 警告 VLD Interactive - vldPersonals におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9004 2014-11-21 11:54 2014-11-10 Show GitHub Exploit DB Packet Storm
218233 6.5 警告 MuleSoft Inc. - Mule Enterprise Management Console における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9000 2014-11-21 11:37 2014-10-22 Show GitHub Exploit DB Packet Storm
218234 6.5 警告 XOOPS - XOOPS の htdocs/modules/system/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8999 2014-11-21 11:25 2014-06-16 Show GitHub Exploit DB Packet Storm
218235 6.5 警告 X7 Group - X7 Chat の lib/message.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-8998 2014-11-21 11:18 2014-11-5 Show GitHub Exploit DB Packet Storm
218236 9 危険 アドバンテック株式会社 - Advantech EKI-6340 Wi-Fi Mesh Access Point の cgi/utility.cgi における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-8387 2014-11-21 11:09 2014-11-19 Show GitHub Exploit DB Packet Storm
218237 7.2 危険 Faronics - Faronics Deep Freeze Standard および Enterprise の DfDiskLo.sys ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-2382 2014-11-21 11:03 2014-11-13 Show GitHub Exploit DB Packet Storm
218238 5 警告 DELL EMC (旧 EMC Corporation) - EMC Avamar Data Store および Avamar Virtual Edition における grid MCUser および GSAN パスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4624 2014-11-20 17:53 2014-10-22 Show GitHub Exploit DB Packet Storm
218239 3.5 注意 OpenStack - OpenStack Orchestration API におけるプロバイダテンプレートの URL を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-3801 2014-11-20 17:45 2014-05-23 Show GitHub Exploit DB Packet Storm
218240 1.9 注意 Xen プロジェクト - Xen の arch/x86/x86_emulate/x86_emulate.c における権限を取得される脆弱性 CWE-Other
その他
CVE-2014-8595 2014-11-20 17:27 2014-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 - - - Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, a moderator with the relevant Discord permission bit can use the bot to moderate users above them in the Discord role hierarchy, as lon… New CWE-862
 Missing Authorization
CVE-2026-47197 2026-06-13 00:56 2026-06-12 Show GitHub Exploit DB Packet Storm
212 - - - Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the latest release suppresses mentions when creating, unbanning, unwarning, kicking, muting, and unmuting, but stored warning reasons a… New CWE-116
 Improper Encoding or Escaping of Output
CVE-2026-48485 2026-06-13 00:56 2026-06-12 Show GitHub Exploit DB Packet Storm
213 - - - Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates a new database tic… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-49347 2026-06-13 00:56 2026-06-12 Show GitHub Exploit DB Packet Storm
214 - - - Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Injection via get_blog_list. This issue has been patched in versions 15.106.0 and 16.… New CWE-89
SQL Injection
CVE-2026-41581 2026-06-13 00:56 2026-06-13 Show GitHub Exploit DB Packet Storm
215 - - - Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious scripts in the browse… New CWE-79
Cross-site Scripting
CVE-2026-44205 2026-06-13 00:56 2026-06-13 Show GitHub Exploit DB Packet Storm
216 - - - Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, stored XSS in Note was possible due to lack of sanitization. This issue has been patched in versions 15.106.0… New CWE-79
Cross-site Scripting
CVE-2026-47739 2026-06-13 00:56 2026-06-13 Show GitHub Exploit DB Packet Storm
217 8.1 HIGH
Network
- - Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass IPv6 subnet rules d… New CWE-284
CWE-697
Improper Access Control
 Incorrect Comparison
CVE-2026-44249 2026-06-13 00:55 2026-06-12 Show GitHub Exploit DB Packet Storm
218 7.5 HIGH
Network
- - Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending a… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-44250 2026-06-13 00:55 2026-06-12 Show GitHub Exploit DB Packet Storm
219 7.5 HIGH
Network
- - Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending c… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-44890 2026-06-13 00:55 2026-06-12 Show GitHub Exploit DB Packet Storm
220 7.5 HIGH
Network
- - Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, the default configuration of the `Http3ConnectionHandler` in the Netty HTTP/3 … New CWE-400
CWE-1188
 Uncontrolled Resource Consumption
 Insecure Default Initialization of Resource
CVE-2026-44892 2026-06-13 00:55 2026-06-12 Show GitHub Exploit DB Packet Storm