Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219721 4.3 警告 LetsFX - WordPress 用 URL Cloak & Encrypt プラグインの go.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4563 2014-07-7 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
219722 4.3 警告 VN-Calendar project - WordPress 用 VN-Calendar プラグインの vncal.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4571 2014-07-7 18:26 2014-06-12 Show GitHub Exploit DB Packet Storm
219723 4.3 警告 Thomas Doki-Thonon - WordPress 用 WPCB プラグインの facture.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4581 2014-07-7 18:26 2014-06-4 Show GitHub Exploit DB Packet Storm
219724 4.3 警告 Yahoo! Updates for WordPress plugin project - WordPress 用 Yahoo! Updates for WordPress プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4603 2014-07-7 18:26 2014-05-28 Show GitHub Exploit DB Packet Storm
219725 4.3 警告 Style It project - WordPress 用 Style It プラグインの fonts/font-form.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4555 2014-07-7 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
219726 4.3 警告 Alipay - WordPress 用 Wu-Rating プラグインの wu-ratepost.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4601 2014-07-7 18:26 2014-06-12 Show GitHub Exploit DB Packet Storm
219727 4.3 警告 WP Timersys - WordPress 用 WP Social Invitations プラグインの test.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4597 2014-07-7 18:26 2014-01-30 Show GitHub Exploit DB Packet Storm
219728 4.3 警告 Stranger Studios - WordPress 用 SS Downloads プラグインの templates/download.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4554 2014-07-7 18:26 2014-05-28 Show GitHub Exploit DB Packet Storm
219729 4.3 警告 ZeenShare project - WordPress 用 ZeenShare プラグインの redirect_to_zeenshare.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4606 2014-07-7 18:26 2014-01-11 Show GitHub Exploit DB Packet Storm
219730 4.3 警告 Smackcoders - WordPress 用 WP Ultimate Email Marketer プラグインの contact/edit.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4600 2014-07-7 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation. The product accidenta… New CWE-468
CVE-2026-34194 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
192 - - - A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or revers… New CWE-79
Cross-site Scripting
CVE-2026-29170 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
193 - - - Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to… New CWE-416
 Use After Free
CVE-2026-29167 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
194 - - - Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. By creating resources of certain types and presenting a set of parameters t… New CWE-122
Heap-based Buffer Overflow
CVE-2026-22164 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
195 6.3 MEDIUM
Network
- - A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-11529 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
196 8.8 HIGH
Network
- - A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub_45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of … New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-11528 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
197 8.8 HIGH
Network
- - A vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Interface. The manipul… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-11524 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
198 8.8 HIGH
Network
- - A vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the argument portMirror… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-11522 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
199 5.5 MEDIUM
Adjacent
- - A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBinds results in b… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-11516 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
200 3.3 LOW
Local
- - A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to … New CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2026-11459 2026-06-9 01:16 2026-06-7 Show GitHub Exploit DB Packet Storm