Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230041 5 警告 サン・マイクロシステムズ
日立
ヒューレット・パッカード		 - Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0872 2013-03-26 15:21 2011-06-7 Show GitHub Exploit DB Packet Storm
230042 6.8 警告 サン・マイクロシステムズ
ヒューレット・パッカード		 - Java Web Start における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2011-0866 2013-03-26 15:12 2011-06-10 Show GitHub Exploit DB Packet Storm
230043 10 危険 アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
VMware
日立
レッドハット		 - Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0864 2013-03-26 15:10 2011-06-7 Show GitHub Exploit DB Packet Storm
230044 10 危険 サン・マイクロシステムズ
ヒューレット・パッカード		 - Windows 上で稼働する複数の Oracle Java SE の Java Runtime Environment コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0817 2013-03-26 15:06 2011-06-7 Show GitHub Exploit DB Packet Storm
230045 6.8 警告 サン・マイクロシステムズ
ヒューレット・パッカード		 - Java Web Start におけるポリシーファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2011-0788 2013-03-26 15:04 2011-06-10 Show GitHub Exploit DB Packet Storm
230046 6.9 警告 Linux - Linux Kernel の net/sctp/socket.c における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1828 2013-03-26 15:04 2013-03-20 Show GitHub Exploit DB Packet Storm
230047 6.8 警告 サン・マイクロシステムズ
ヒューレット・パッカード		 - Java Web Start における設定ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2011-0786 2013-03-26 14:44 2011-06-10 Show GitHub Exploit DB Packet Storm
230048 2.6 注意 株式会社ピーエムナイン - OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2300 2013-03-26 12:02 2013-03-26 Show GitHub Exploit DB Packet Storm
230049 2.6 注意 COB's Products - COBIME におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0720 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
230050 2.6 注意 codedesign.jp - ArtIME 日本語入力におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0719 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1781 5.4 MEDIUM
Network 		apache atlas An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue. CWE-80
Basic XSS 		CVE-2025-62198 2026-06-23 23:53 2026-06-22 Show GitHub Exploit DB Packet Storm
1782 8.1 HIGH
Network 		- - picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.autocomplete.AutoComplete.get_entity function in reduce methods. Attackers can embed undetected code in pickle fil… CWE-502
 Deserialization of Untrusted Data 		CVE-2025-71358 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1783 6.5 MEDIUM
Network 		- - Cap-go before 12.128.2 contains multiple SQL injection vulnerabilities in cloudflare.ts where user-controlled values from API request bodies are interpolated directly into SQL query strings without s… CWE-89
SQL Injection 		CVE-2026-56221 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1784 6.4 MEDIUM
Network 		- - Capgo before 12.128.2 contains a weak parsing vulnerability in the x-limited-key-id header that allows attackers to bypass subkey enforcement by submitting malformed values, zero, or duplicate header… CWE-20
 Improper Input Validation  		CVE-2026-56306 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1785 5.3 MEDIUM
Network 		- - Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.get_current_plan_max_org RPC function that allows unauthenticated attackers to retrieve arbitrary organization plan … CWE-285
Improper Authorization 		CVE-2026-56311 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1786 6.8 MEDIUM
Network 		- - The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameters in the import_list(), url_detail(), and file_detail() … - CVE-2026-7842 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1787 8.8 HIGH
Network 		- - The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a SQL Injection vulnerability exploitable by … - CVE-2026-8163 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1788 7.1 HIGH
Network 		- - The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form output on validation errors, leading to a Reflected Cros… - CVE-2026-8172 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1789 5.4 MEDIUM
Network 		- - The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before storing it as post meta and rendering it b… - CVE-2026-8378 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1790 7.5 HIGH
Network 		- - The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated attackers to download files uploaded by… - CVE-2026-8379 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm