Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223841 7.5 危険 phpkf - phpKF の forum_duzen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6443 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
223842 5.8 警告 sina - Sina Inc. DLoader Class ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他
CVE-2008-6442 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
223843 4.3 警告 phpsqlitecms - phpSQLiteCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6435 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
223844 7.5 危険 psychostats - PsychoStats における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6422 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
223845 7.5 危険 socialsitegenerator - Social Site Generator の social_game_play.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6421 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
223846 5 警告 socialsitegenerator - Social Site Generator における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2008-6420 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
223847 7.5 危険 socialsitegenerator - Social Site Generator における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6419 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
223848 7.5 危険 torrenttrader - TorrentTrader の scrape.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6418 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
223849 10 危険 Youngzsoft - YoungZSoft CCProxy におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-6415 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
223850 7.5 危険 vignette - Vignette Content Management における管理者権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2008-6412 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2841 7.5 HIGH
Network
automattic activitypub The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending posts NVD-CWE-noinfo
CVE-2026-4338 2026-04-15 01:23 2026-04-8 Show GitHub Exploit DB Packet Storm
2842 8.0 HIGH
Adjacent
tp-link archer_ax53_firmware An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file… CWE-78
OS Command 
CVE-2026-30818 2026-04-15 01:20 2026-04-9 Show GitHub Exploit DB Packet Storm
2843 5.7 MEDIUM
Adjacent
tp-link archer_ax53_firmware An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is pro… CWE-15
CWE-610
 External Control of System or Configuration Setting
Externally Controlled Reference to a Resource in Another Sphere
CVE-2026-30817 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2844 5.7 MEDIUM
Adjacent
tp-link archer_ax53_firmware An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is p… CWE-15
CWE-610
 External Control of System or Configuration Setting
Externally Controlled Reference to a Resource in Another Sphere
CVE-2026-30816 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2845 8.0 HIGH
Adjacent
tp-link archer_ax53_firmware An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration fil… CWE-78
OS Command 
CVE-2026-30815 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2846 8.0 HIGH
Adjacent
tp-link archer_ax53_firmware A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via … CWE-121
CWE-787
Stack-based Buffer Overflow
 Out-of-bounds Write
CVE-2026-30814 2026-04-15 01:19 2026-04-9 Show GitHub Exploit DB Packet Storm
2847 7.8 HIGH
Local
amazon athena_odbc Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authenticatio… CWE-77
Command Injection
CVE-2026-35558 2026-04-15 01:17 2026-04-4 Show GitHub Exploit DB Packet Storm
2848 7.5 HIGH
Network
montala resourcespace ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' parameter. Attackers can… CWE-89
SQL Injection
CVE-2019-25662 2026-04-15 01:16 2026-04-6 Show GitHub Exploit DB Packet Storm
2849 4.7 MEDIUM
Network
- - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through < 7.0.00. CWE-601
Open Redirect
CVE-2026-39484 2026-04-15 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
2850 4.3 MEDIUM
Network
- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from … CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-39469 2026-04-15 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm