Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223781 7.5 危険 yarck - SH-News の action.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-6664 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
223782 7.5 危険 phpauctions - PHPAuctions.info PHPAuctions の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6663 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
223783 4.3 警告 structum - InfoBiz Server の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6654 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
223784 7.5 危険 wh-com - Joomla! および Mambo 用の webhosting.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6653 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
223785 8.8 危険 versalsoft - Versalsoft HTTP Image Uploader ActiveX コントロールにおける任意のファイルを削除される脆弱性 CWE-16
環境設定
CVE-2008-6638 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
223786 7.8 危険 TYPO3 Association - TYPO3 用の wt_gallery エクステンションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6630 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
223787 4.3 警告 webbdomain - WEBBDOMAIN Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6629 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
223788 7.5 危険 webbdomain - WEBBDOMAIN WebShop の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6627 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
223789 7.5 危険 webbdomain - WEBBDOMAIN Quiz の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6626 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
223790 7.5 危険 webbdomain - WEBBDOMAIN Polls の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6625 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2841 7.5 HIGH
Network
automattic activitypub The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending posts NVD-CWE-noinfo
CVE-2026-4338 2026-04-15 01:23 2026-04-8 Show GitHub Exploit DB Packet Storm
2842 8.0 HIGH
Adjacent
tp-link archer_ax53_firmware An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file… CWE-78
OS Command 
CVE-2026-30818 2026-04-15 01:20 2026-04-9 Show GitHub Exploit DB Packet Storm
2843 5.7 MEDIUM
Adjacent
tp-link archer_ax53_firmware An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is pro… CWE-15
CWE-610
 External Control of System or Configuration Setting
Externally Controlled Reference to a Resource in Another Sphere
CVE-2026-30817 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2844 5.7 MEDIUM
Adjacent
tp-link archer_ax53_firmware An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is p… CWE-15
CWE-610
 External Control of System or Configuration Setting
Externally Controlled Reference to a Resource in Another Sphere
CVE-2026-30816 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2845 8.0 HIGH
Adjacent
tp-link archer_ax53_firmware An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration fil… CWE-78
OS Command 
CVE-2026-30815 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2846 8.0 HIGH
Adjacent
tp-link archer_ax53_firmware A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via … CWE-121
CWE-787
Stack-based Buffer Overflow
 Out-of-bounds Write
CVE-2026-30814 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2847 7.8 HIGH
Local
amazon athena_odbc Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authenticatio… CWE-77
Command Injection
CVE-2026-35558 2026-04-15 01:17 2026-04-4 Show GitHub Exploit DB Packet Storm
2848 7.5 HIGH
Network
montala resourcespace ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' parameter. Attackers can… CWE-89
SQL Injection
CVE-2019-25662 2026-04-15 01:16 2026-04-6 Show GitHub Exploit DB Packet Storm
2849 4.7 MEDIUM
Network
- - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through < 7.0.00. CWE-601
Open Redirect
CVE-2026-39484 2026-04-15 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
2850 4.3 MEDIUM
Network
- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from … CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-39469 2026-04-15 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm