Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223751 6.8 警告 phpmotion - PHPmotion の password.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6729 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
223752 7.5 危険 PHPNUKE - PHP-Nuke の Sections モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6728 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
223753 7.5 危険 turnkeyforms - TurnkeyForms Entertainment Portal における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6723 2012-12-20 19:10 2009-04-14 Show GitHub Exploit DB Packet Storm
223754 7.5 危険 uochm - U&M Software Event Lister における脆弱性 CWE-287
不適切な認証 		CVE-2008-6719 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
223755 7.5 危険 uochm - U&M Software JustBookIt における脆弱性 CWE-287
不適切な認証 		CVE-2008-6718 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
223756 7.5 危険 uochm - U&M Software Signup における脆弱性 CWE-287
不適切な認証 		CVE-2008-6717 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
223757 7.5 危険 PreProject.com - Pre ADS Portal の homeadmin/adminhome.php における脆弱性 CWE-287
不適切な認証 		CVE-2008-6716 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
223758 4.3 警告 PreProject.com - Pre ADS Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6715 2012-12-20 19:10 2009-04-13 Show GitHub Exploit DB Packet Storm
223759 7.5 危険 xecms - xeCMS の admin.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6714 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
223760 5 警告 stalker-game - S.T.A.L.K.E.R.: Shadow of Chernobyl の MultipacketReciever::RecievePacket 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-6705 2012-12-20 19:10 2009-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1521 7.2 HIGH
Network 		- - The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the `block_name` parameter of the `/wp-json/backwpup/v1/getblock` REST endpoint in all versions up to, and including, 5.6.6… CWE-22
Path Traversal 		CVE-2026-6227 2026-04-14 12:16 2026-04-14 Show GitHub Exploit DB Packet Storm
1522 7.2 HIGH
Network 		- - The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all versions up to, and including, 1.15.40.… CWE-79
Cross-site Scripting 		CVE-2026-4388 2026-04-14 12:16 2026-04-14 Show GitHub Exploit DB Packet Storm
1523 9.1 CRITICAL
Network 		- - The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the `delete_question_answer()` function in all versions up to, and including, 4.3.… CWE-862
 Missing Authorization 		CVE-2026-4365 2026-04-14 11:16 2026-04-14 Show GitHub Exploit DB Packet Storm
1524 7.5 HIGH
Network 		- - The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search endpoint in all versions up to, and including, 3.8.6.1. This is due to the `_cct_se… CWE-89
SQL Injection 		CVE-2026-4352 2026-04-14 11:16 2026-04-14 Show GitHub Exploit DB Packet Storm
1525 6.1 MEDIUM
Network 		pi-hole web_interface Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, configuration values from the /api/config endpoi… CWE-79
Cross-site Scripting 		CVE-2026-33406 2026-04-14 11:04 2026-04-7 Show GitHub Exploit DB Packet Storm
1526 7.8 HIGH
Local 		twitch twitch_studio Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary code as root by exploiting an unpro… CWE-862
 Missing Authorization 		CVE-2024-14032 2026-04-14 11:01 2026-04-7 Show GitHub Exploit DB Packet Storm
1527 7.5 HIGH
Network 		fedify fedify
vocab-runtime 		Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP redirects recursively in its remote doc… CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling 		CVE-2026-34148 2026-04-14 10:58 2026-04-7 Show GitHub Exploit DB Packet Storm
1528 5.0 MEDIUM
Network 		openstack glance OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-34881 2026-04-14 10:51 2026-03-31 Show GitHub Exploit DB Packet Storm
1529 5.0 MEDIUM
Network 		openstack glance OpenStack Glance <29.1.1, >=30.0.0 <30.1.1, ==31.0.0 se ve afectado por Falsificación de Petición del Lado del Servidor (SSRF). Mediante el uso de redirecciones HTTP, un usuario autenticado … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-34881 2026-04-14 10:51 2026-03-31 Show GitHub Exploit DB Packet Storm
1530 5.3 MEDIUM
Network 		tautulli tautulli Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /pms_image_proxy endpoint accepts a user-supplied img parameter and forwards it to Plex Med… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-31804 2026-04-14 10:43 2026-03-31 Show GitHub Exploit DB Packet Storm