Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
236921 7.5 危険 phpfaber - phpFaber TopSites の index.php における SQL インジェクションの脆弱性 - CVE-2006-3770 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
236922 2.6 注意 top xl - Top XL におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3769 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
236923 6.4 警告 intervations - FileCOPA FTP Server の filecpnt.exe における整数アンダーフローの脆弱性 - CVE-2006-3768 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
236924 6.8 警告 darrens 5-dollar script archive - Darren's $5 Script Archive osDate の showprofile.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3767 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
236925 5 警告 darrens 5-dollar script archive - Darren's $5 Script Archive osDate における本人のレートを格上げできる脆弱性 - CVE-2006-3766 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
236926 4.3 警告 huttenlocher webdesign - Huttenlocher Webdesign hwdeGUEST におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3765 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
236927 5 警告 till gerken - Till Gerken phpPolls における新規の世論調査を作成される脆弱性 - CVE-2006-3764 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
236928 7.5 危険 dieselscripts - Diesel Joke Site の category.php における SQL インジェクションの脆弱性 - CVE-2006-3763 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
236929 7.5 危険 touch control - Touch Control ActiveX コントロールにおける任意のファイルを実行される脆弱性 - CVE-2006-3762 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
236930 4.3 警告 mybulletinboard - MyBB の inc/functions_post.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-3761 2012-12-20 18:02 2006-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 7.1 HIGH
Network
- - Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. New CWE-79
Cross-site Scripting
CVE-2026-57312 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
232 9.3 CRITICAL
Network
- - Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. New CWE-89
SQL Injection
CVE-2026-56067 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
233 5.8 MEDIUM
Network
- - Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions. New CWE-22
Path Traversal
CVE-2026-56066 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
234 7.5 HIGH
Network
- - Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions. New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-56060 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
235 9.9 CRITICAL
Network
- - Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions. New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-56059 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
236 7.1 HIGH
Network
- - Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. New CWE-79
Cross-site Scripting
CVE-2026-56047 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
237 6.5 MEDIUM
Network
- - Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions. New CWE-79
Cross-site Scripting
CVE-2026-56046 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
238 7.1 HIGH
Network
- - Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. New CWE-79
Cross-site Scripting
CVE-2026-56040 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
239 7.1 HIGH
Network
- - Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. New CWE-79
Cross-site Scripting
CVE-2026-56039 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
240 9.8 CRITICAL
Network
- - Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions. New CWE-266
 Incorrect Privilege Assignment
CVE-2026-56033 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm