Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221541 6.5 警告 サイボウズ - サイボウズ ガルーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-0821 2014-03-10 15:13 2014-02-26 Show GitHub Exploit DB Packet Storm
221542 6.8 警告 Lothian Buses - Android 用 Edinburgh by Bus アプリケーションにおける任意の JavaScript コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1886 2014-03-10 15:13 2014-02-7 Show GitHub Exploit DB Packet Storm
221543 4.3 警告 VideoLAN - VideoLAN VLC media player の ASF デマルチプレクサの modules/demux/asf/libasf.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-1684 2014-03-10 15:13 2014-01-27 Show GitHub Exploit DB Packet Storm
221544 2.1 注意 Jordy Meow - WordPress 用 Media File Renamer プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2040 2014-03-10 15:12 2014-01-31 Show GitHub Exploit DB Packet Storm
221545 5.8 警告 GNU Project - GnuTLS の lib/x509/verify.c における制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1959 2014-03-10 14:17 2014-02-12 Show GitHub Exploit DB Packet Storm
221546 5.8 警告 GNU Project - GnuTLS における制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-5138 2014-03-10 14:16 2009-01-9 Show GitHub Exploit DB Packet Storm
221547 6.9 警告 サン・マイクロシステムズ
オラクル		 - Oracle Java SE の Java Runtime Environment における Java installer に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2467 2014-03-7 18:47 2013-06-18 Show GitHub Exploit DB Packet Storm
221548 7.8 危険 ShenZhen Foscam Intelligent Technology - Foscam FI8910W に認証回避の脆弱性 CWE-255
CWE-Other
CVE-2014-1911 2014-03-7 18:19 2014-03-3 Show GitHub Exploit DB Packet Storm
221549 10 危険 Synology Inc. - Synology DiskStation Manager にアクセス制御不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6955 2014-03-7 18:15 2014-01-7 Show GitHub Exploit DB Packet Storm
221550 6.8 警告 OpenStack - OpenStack Compute および Icehouse の libvirt ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-6437 2014-03-7 18:03 2013-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2701 8.7 HIGH
Network 		- - NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient server-side input sanitization in the Req… CWE-79
Cross-site Scripting 		CVE-2026-41147 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2702 - - - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5 and prior, in addition to 11.0.0-alpha.1 through 11.12.0 are vulnerable to CSS … CWE-94
Code Injection 		CVE-2026-41148 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2703 - - - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5 and earlier, as well as 11.0.0-alpha.1 through 11.14.0, are vulnerable to HTML … CWE-94
Code Injection 		CVE-2026-41149 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2704 8.8 HIGH
Network 		- - A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manip… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-9294 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2705 8.8 HIGH
Network 		- - A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. Performing a manipul… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-9295 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2706 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. The manipulation of th… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-9297 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2707 6.3 MEDIUM
Network 		- - A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM of the component POST Request Handler. Executing a manipulation of the argument… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-9296 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2708 6.3 MEDIUM
Network 		- - A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. This issue affects the function eval of the file app/index/command/VpsTest.php of … CWE-74
CWE-94
Injection
Code Injection 		CVE-2026-9302 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2709 4.3 MEDIUM
Network 		- - A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Th… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2026-9303 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
2710 5.0 MEDIUM
Network 		- - A security flaw has been discovered in calcom cal.diy up to 4.9.4. The affected element is the function validateUrlForSSRF of the file apps/web/app/api/logo/route.ts of the component Logo API. The ma… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-9304 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm