Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223001	4	警告	Moodle	-	Moodle の repository/webdav/lib.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-1832	2013-12-19 19:08	2013-03-25	Show	GitHub Exploit DB Packet Storm

223002	5	警告	Moodle	-	Moodle の lib/setuplib.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-1831	2013-12-19 19:07	2013-03-25	Show	GitHub Exploit DB Packet Storm

223003	5	警告	Moodle	-	Moodle の user/view.php における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1830	2013-12-19 19:07	2013-03-25	Show	GitHub Exploit DB Packet Storm

223004	7.2	危険	freedesktop.org	-	Dbus-glib の dbus-gproxy における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0292	2013-12-19 19:07	2013-03-5	Show	GitHub Exploit DB Packet Storm

223005	6.4	警告	Zend Technologies Ltd.	-	Zend Framework の Zend_XmlRpc における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2012-3363	2013-12-19 19:07	2013-02-13	Show	GitHub Exploit DB Packet Storm

223006	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3327	2013-12-19 18:46	2013-05-14	Show	GitHub Exploit DB Packet Storm

223007	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3326	2013-12-19 18:43	2013-05-14	Show	GitHub Exploit DB Packet Storm

223008	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3325	2013-12-19 18:38	2013-05-14	Show	GitHub Exploit DB Packet Storm

223009	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3324	2013-12-19 18:36	2013-05-14	Show	GitHub Exploit DB Packet Storm

223010	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-2728	2013-12-19 18:32	2013-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
691	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Con… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-53440	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

692	7.5	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local File Inclusion. This issue affec… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-58024	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

693	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-58705	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

694	8.1	HIGH Network	-	-	Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6. New	CWE-502 Deserialization of Untrusted Data	CVE-2026-39550	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

695	8.1	HIGH Network	-	-	Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1. New	CWE-502 Deserialization of Untrusted Data	CVE-2026-39551	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

696	7.5	HIGH Network	-	-	Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0. New	CWE-862 Missing Authorization	CVE-2026-42669	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

697	9.3	CRITICAL Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a throu… New	CWE-89 SQL Injection	CVE-2026-42684	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

698	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS. This issue affects WP Job Portal: from n/a through 2.5… New	CWE-79 Cross-site Scripting	CVE-2026-42685	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

699	6.5	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin Update	CWE-863 Incorrect Authorization	CVE-2026-49376	2026-06-2 21:39	2026-05-30	Show	GitHub Exploit DB Packet Storm

700	4.3	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters Update	CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable	CVE-2026-49377	2026-06-2 21:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed