Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220551 4 警告 Mahara - Mahara における任意のフォルダを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4432 2014-05-20 14:00 2013-10-31 Show GitHub Exploit DB Packet Storm
220552 5.5 警告 Mahara - Mahara における任意のブロックを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4431 2014-05-20 13:59 2013-10-3 Show GitHub Exploit DB Packet Storm
220553 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4430 2014-05-20 13:59 2013-10-3 Show GitHub Exploit DB Packet Storm
220554 4 警告 Mahara - Mahara における任意のアーティファクトを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4429 2014-05-20 13:58 2013-10-3 Show GitHub Exploit DB Packet Storm
220555 4.3 警告 アップル - 複数の Apple 製品の CFNetwork におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1296 2014-05-20 11:52 2014-04-22 Show GitHub Exploit DB Packet Storm
220556 4.4 警告 アップル - OS X 上で稼動する Apple iTunes におけるファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1347 2014-05-20 11:50 2014-05-17 Show GitHub Exploit DB Packet Storm
220557 2.1 注意 Leon Weber - pyxtrlock における画面のロックを解除することなくキーボードまたはマウスへのアクセス権を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4427 2014-05-20 11:10 2013-09-9 Show GitHub Exploit DB Packet Storm
220558 3.6 注意 Leon Weber - pyxtrlock におけるロック画面を回避される脆弱性 CWE-noinfo
情報不足
CVE-2013-4426 2014-05-20 11:09 2013-09-9 Show GitHub Exploit DB Packet Storm
220559 7.5 危険 The Cacti Group - Cacti の graph_xport.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2708 2014-05-19 18:29 2014-03-30 Show GitHub Exploit DB Packet Storm
220560 7.8 危険 ヒューレット・パッカード - HP Integrated Lights-Out 2 のサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-2601 2014-05-19 18:29 2014-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3491 6.3 MEDIUM
Network
- - A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the file /common/upload of the component Common Upload Endpoint. Performing a mani… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-9374 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
3492 6.3 MEDIUM
Network
- - A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Execut… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-9376 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
3493 2.4 LOW
Network
- - A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the argument productName … CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9377 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
3494 4.3 MEDIUM
Network
- - A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This affects an unknown part of the file /user of the component User Management Handler. This manipu… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-9409 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
3495 4.3 MEDIUM
Network
- - A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workf… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-9410 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
3496 4.3 MEDIUM
Network
- - A weakness has been identified in code-projects Employee Management System 1.0. This affects an unknown function of the file /eloginwel.php. This manipulation of the argument ID causes cross site scr… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9415 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
3497 4.3 MEDIUM
Network
- - A vulnerability was detected in code-projects Employee Management System 1.0. Affected is an unknown function of the file /myprofileup.php. Performing a manipulation of the argument ID results in cro… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9417 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
3498 4.3 MEDIUM
Network
- - A flaw has been found in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /changepassemp.php. Executing a manipulation of the argum… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9418 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
3499 4.3 MEDIUM
Network
- - A vulnerability has been found in code-projects Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /empproject.php. The manipulation of the argument ID l… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9419 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
3500 6.3 MEDIUM
Network
- - A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to la… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2026-9420 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm