Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
235321 6.5 警告 Cartpauj.com - WordPress 用 Mingle Forum プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5328 2012-10-11 15:04 2012-10-8 Show GitHub Exploit DB Packet Storm
235322 6.5 警告 Cartpauj.com - WordPress 用 Mingle Forum プラグインの fs-admin/fs-admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5327 2012-10-11 15:03 2012-10-8 Show GitHub Exploit DB Packet Storm
235323 6.8 警告 idevSpot - IDevSpot iSupport の admin/function.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5326 2012-10-11 15:02 2012-10-8 Show GitHub Exploit DB Packet Storm
235324 2.1 注意 Cartpauj.com - WordPress 用 Shortcode Redirect プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5325 2012-10-11 15:01 2012-10-8 Show GitHub Exploit DB Packet Storm
235325 9.3 危険 Tracker Software Products - Tracker Software PDF-XChange の pdfxctrl.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5324 2012-10-11 15:00 2012-10-8 Show GitHub Exploit DB Packet Storm
235326 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0846 2012-10-11 14:58 2012-01-11 Show GitHub Exploit DB Packet Storm
235327 6.8 警告 XAVi Technologies - Xavi X7968 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5323 2012-10-11 14:57 2012-10-8 Show GitHub Exploit DB Packet Storm
235328 4.3 警告 XAVi Technologies - Xavi X7968 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5322 2012-10-11 14:57 2012-10-8 Show GitHub Exploit DB Packet Storm
235329 5.8 警告 Tiki Software Community Association - TikiWiki CMS/Groupware における任意の Web サイトのページをロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5321 2012-10-11 14:55 2012-10-8 Show GitHub Exploit DB Packet Storm
235330 6.8 警告 Sagemcom - Sagem F@ST 2604 の password.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5320 2012-10-11 14:53 2012-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2751 7.0 HIGH
Local 		- - A command injection vulnerability was discovered in the `rpmuncompress` utility of RPM. When extracting certain archive formats (ZIP, 7z, GEM) to a specified destination directory, the tool inserts t… CWE-78
OS Command  		CVE-2026-44604 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2752 7.7 HIGH
Network 		- - A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing … CWE-59
Link Following 		CVE-2026-9804 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2753 5.4 MEDIUM
Network 		apache shiro With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro. This issue affects Apache Shiro from 2.0-alpha… CWE-601
CWE-918
Open Redirect
Server-Side Request Forgery (SSRF)  		CVE-2026-44598 2026-05-28 22:44 2026-05-26 Show GitHub Exploit DB Packet Storm
2754 6.1 MEDIUM
Network 		mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the raw user-supplied con… CWE-79
Cross-site Scripting 		CVE-2026-44708 2026-05-28 22:44 2026-05-27 Show GitHub Exploit DB Packet Storm
2755 - - - In the Linux kernel, the following vulnerability has been resolved: selinux: use sk blob accessor in socket permission helpers SELinux socket state lives in the composite LSM socket blob. sock_has… - CVE-2026-46104 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2756 - - - In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() Sashiko points out there are two bugs here in the error u… - CVE-2026-46126 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2757 - - - In the Linux kernel, the following vulnerability has been resolved: KVM: x86: check for nEPT/nNPT in slow flush hypercalls Checking is_guest_mode(vcpu) is incorrect, because translate_nested_gpa() … - CVE-2026-46131 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2758 - - - In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration cros_typec_register_thunderbolt() missed initializing the … - CVE-2026-46134 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2759 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtk_usb_hci_wmt_sync() casts the WMT event response SKB da… - CVE-2026-46140 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2760 - - - In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF restricted register. When a VF is initialized, attempt… - CVE-2026-46142 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm