Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218711 7.5 危険 FoeCMS - FoeCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4850 2014-07-11 11:25 2014-07-4 Show GitHub Exploit DB Packet Storm
218712 4.3 警告 シスコシステムズ - Cisco Small Business SPA300 および SPA500 シリーズの IP phone の Web ユーザインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3313 2014-07-10 18:21 2014-07-9 Show GitHub Exploit DB Packet Storm
218713 6.9 警告 シスコシステムズ - Cisco Small Business SPA300 および SPA500 phone のデバッグコンソールインターフェースにおける任意の debug シェルコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2014-3312 2014-07-10 18:20 2014-07-9 Show GitHub Exploit DB Packet Storm
218714 5 警告 シスコシステムズ - Cisco IOS および IOS XE の NTP の実装における時刻同期の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3309 2014-07-10 18:19 2014-07-9 Show GitHub Exploit DB Packet Storm
218715 7.8 危険 ネットギア - Netgear GS105PE Prosafe Plus Switch に認証情報がハードコードされている問題 CWE-255
CWE-Other
CVE-2014-2969 2014-07-10 17:10 2014-07-3 Show GitHub Exploit DB Packet Storm
218716 5.1 警告 リムアーツ - Becky! Internet Mail におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-3891 2014-07-10 17:06 2014-07-8 Show GitHub Exploit DB Packet Storm
218717 2.7 注意 Xen プロジェクト - Xen の arch/arm/domain.c 内の alloc_domain_struct 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4022 2014-07-10 16:50 2014-06-25 Show GitHub Exploit DB Packet Storm
218718 9.3 危険 XnSoft - XnView の xjpegls.dll フォーマットプラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4988 2014-07-10 16:29 2012-06-29 Show GitHub Exploit DB Packet Storm
218719 6.9 警告 マイクロソフト - 複数の Microsoft Windows 製品の DirectShow における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2780 2014-07-10 15:02 2014-07-8 Show GitHub Exploit DB Packet Storm
218720 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの afd.sys の Ancillary Function Driver における権限昇格の脆弱性 CWE-Other
その他
CVE-2014-1767 2014-07-10 15:01 2014-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1021 7.8 HIGH
Local
- - Command injection in Raynet rvia version 12.6.4392.49-amd64.deb allows adversaries to execute arbitrary Java code via a crafted path that matches the improperly terminated search criteria of rvia's J… New CWE-77
Command Injection
CVE-2026-38945 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1022 4.3 MEDIUM
Network
- - PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality New CWE-79
Cross-site Scripting
CVE-2026-36239 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1023 5.2 MEDIUM
Adjacent
- - SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts VIEW intents with javascript: URI… New CWE-79
Cross-site Scripting
CVE-2025-68709 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1024 9.8 CRITICAL
Network
ibm websphere_application_server IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code executi… Update CWE-94
Code Injection
CVE-2026-8633 2026-05-28 03:12 2026-05-27 Show GitHub Exploit DB Packet Storm
1025 7.8 HIGH
Local
openvpn connect Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel Update CWE-78
CWE-267
CWE-270
CWE-648
OS Command 
 Privilege Defined With Unsafe Actions
 Privilege Context Switching Error
 Incorrect Use of Privileged APIs
CVE-2026-9560 2026-05-28 03:08 2026-05-27 Show GitHub Exploit DB Packet Storm
1026 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2. New CWE-862
 Missing Authorization
CVE-2026-49054 2026-05-28 02:44 2026-05-28 Show GitHub Exploit DB Packet Storm
1027 9.1 CRITICAL
Network
- - HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets magic prefixes: '| cm… New CWE-73
CWE-78
 External Control of File Name or Path
OS Command 
CVE-2026-8450 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1028 4.8 MEDIUM
Adjacent
- - IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, … New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-4410 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1029 7.3 HIGH
Network
- - IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in … New CWE-95
Eval Injection
CVE-2026-48962 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1030 4.3 MEDIUM
Network
- - Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of cred… New CWE-269
 Improper Privilege Management
CVE-2026-48926 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm