Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229311 7.5 危険 Michau Enterprises - SenseSites CommonSense CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5342 2012-10-12 14:59 2012-10-9 Show GitHub Exploit DB Packet Storm
229312 4.3 警告 otterware - Otterware StatIt におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5341 2012-10-12 14:58 2012-10-9 Show GitHub Exploit DB Packet Storm
229313 4 警告 OpenStack - OpenStack Keystone におけるテナントのリソースにアクセスされる脆弱性 CWE-287
不適切な認証 		CVE-2012-4457 2012-10-12 11:35 2012-09-28 Show GitHub Exploit DB Packet Storm
229314 7.5 危険 OpenStack - OpenStack Keystone における任意のユーザのロールを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2012-4456 2012-10-12 11:31 2012-09-28 Show GitHub Exploit DB Packet Storm
229315 6.8 警告 Limny - Limny の admin/preview.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5210 2012-10-12 11:18 2012-10-9 Show GitHub Exploit DB Packet Storm
229316 4.3 警告 CloneForest - GraphicsClone Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5209 2012-10-12 11:17 2012-10-9 Show GitHub Exploit DB Packet Storm
229317 7.8 危険 FreeBSD - FreeBSD におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2012-3549 2012-10-12 10:35 2012-10-9 Show GitHub Exploit DB Packet Storm
229318 4.3 警告 マイクロソフト - Microsoft SQL Server の SQL Server Report Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2552 2012-10-11 18:54 2012-10-9 Show GitHub Exploit DB Packet Storm
229319 5 警告 マイクロソフト - Microsoft Windows Server 2008 および Windows 7 の Kerberos におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2012-2551 2012-10-11 18:53 2012-10-9 Show GitHub Exploit DB Packet Storm
229320 6.9 警告 マイクロソフト - Microsoft Windows のカーネルにおける整数オーバーフロー脆弱性 CWE-189
数値処理の問題 		CVE-2012-2529 2012-10-11 18:52 2012-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 7.3 HIGH
Network 		- - A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown processing of the file /public/install/lp.sql of the component API Upload Endpoint. Such manipulation… New CWE-259
CWE-798
Use of Hard-coded Password 
 Use of Hard-coded Credentials 		CVE-2026-6574 2026-04-19 23:16 2026-04-19 Show GitHub Exploit DB Packet Storm
2 6.3 MEDIUM
Network 		- - A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of t… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-6573 2026-04-19 22:16 2026-04-19 Show GitHub Exploit DB Packet Storm
3 5.6 MEDIUM
Network 		- - A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of the component fileU… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-6572 2026-04-19 22:16 2026-04-19 Show GitHub Exploit DB Packet Storm
4 6.3 MEDIUM
Network 		- - A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipul… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-6571 2026-04-19 21:16 2026-04-19 Show GitHub Exploit DB Packet Storm
5 2.7 LOW
Network 		- - A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argum… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-6570 2026-04-19 21:16 2026-04-19 Show GitHub Exploit DB Packet Storm
6 7.3 HIGH
Network 		- - A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation o… New CWE-287
Improper Authentication 		CVE-2026-6569 2026-04-19 20:16 2026-04-19 Show GitHub Exploit DB Packet Storm
7 7.3 HIGH
Network 		- - A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Ha… New CWE-22
Path Traversal 		CVE-2026-6568 2026-04-19 19:16 2026-04-19 Show GitHub Exploit DB Packet Storm
8 4.3 MEDIUM
Network 		- - A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0. The impacted element is an unknown function of the component Session Handling. The manipulation results in improper authorization. It is … New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-6564 2026-04-19 19:16 2026-04-19 Show GitHub Exploit DB Packet Storm
9 8.8 HIGH
Network 		- - A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoById of the file /goform/aspForm. The manipulation of the argument param leads to … New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-6563 2026-04-19 18:16 2026-04-19 Show GitHub Exploit DB Packet Storm
10 7.3 HIGH
Network 		- - A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of the file /index/Search/index.html. Executing a manipulation of the argument keyword can lead to sql… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-6562 2026-04-19 18:16 2026-04-19 Show GitHub Exploit DB Packet Storm