Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
236861 7.5 危険 gonafish - Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性 - CVE-2006-3884 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
236862 4.3 警告 gonafish - Gonafish LinksCaffe におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3883 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
236863 5 警告 musicbox - Shalwan MusicBox における設定情報を取得される脆弱性 - CVE-2006-3882 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
236864 4.3 警告 musicbox - Shalwan MusicBox におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3881 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
236865 5 警告 miod vallat - Mikmod Sound System の libmikmod における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2006-3879 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
236866 2.1 注意 opsware - Opsware NAS における MySQL MAX データベースのルートパスワードを読まれる脆弱性 - CVE-2006-3878 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
236867 4.3 警告 phptoys - Micro GuestBook の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3852 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
236868 7.5 危険 X7 Group - X7 Chat の upgradev1.php における SQL インジェクションの脆弱性 - CVE-2006-3851 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
236869 7.5 危険 pumpkin studios - Warzone 2100 および Warzone Resurrection におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3849 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
236870 2.6 注意 krischan jodies - IPCalc 用の CGI wrapper におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3848 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221 4.3 MEDIUM
Network 		- - Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions. New CWE-862
 Missing Authorization 		CVE-2026-57640 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
222 4.3 MEDIUM
Network 		- - Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-57634 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
223 5.3 MEDIUM
Network 		- - Unauthenticated Sensitive Data Exposure in WCBoost &#8211; Products Compare <= 1.1.0 versions. New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-57633 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
224 7.6 HIGH
Network 		- - Administrator SQL Injection in WP All Import <= 4.0.1 versions. New CWE-89
SQL Injection 		CVE-2026-57628 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
225 4.9 MEDIUM
Network 		- - Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions. New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-57627 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
226 4.3 MEDIUM
Network 		- - Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions. New CWE-862
 Missing Authorization 		CVE-2026-57430 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
227 7.1 HIGH
Network 		- - Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions. New CWE-79
Cross-site Scripting 		CVE-2026-57325 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
228 7.1 HIGH
Network 		- - Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions. New CWE-79
Cross-site Scripting 		CVE-2026-57319 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
229 6.5 MEDIUM
Network 		- - Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. New CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-57318 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
230 6.5 MEDIUM
Network 		- - Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions. New CWE-79
Cross-site Scripting 		CVE-2026-57313 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm