Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
237681 9.3 危険 hacksoft - Hacksoft の The Hacker における HTML ドキュメント内のマルウェアの検出を回避する脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5544 2012-09-25 17:17 2008-12-12 Show GitHub Exploit DB Packet Storm
237682 9.3 危険 PC Tools - PC Tools AntiVirus における HTML 文書内のマルウエアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5537 2012-09-25 17:17 2008-12-12 Show GitHub Exploit DB Packet Storm
237683 9.3 危険 Panda Security - Panda Antivirus におけるマルウエアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5536 2012-09-25 17:17 2008-12-12 Show GitHub Exploit DB Packet Storm
237684 9.3 危険 Norman - Norman Antivirus における HTML ドキュメント内のマルウェア検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5535 2012-09-25 17:17 2008-12-12 Show GitHub Exploit DB Packet Storm
237685 9.3 危険 K7 Computing - K7AntiVirus におけるマルウエア検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5533 2012-09-25 17:17 2008-12-12 Show GitHub Exploit DB Packet Storm
237686 9.3 危険 Ikarus - Ikarus Virus Utilities における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5532 2012-09-25 17:17 2008-12-12 Show GitHub Exploit DB Packet Storm
237687 4.3 警告 Moodle - Moodle におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5432 2012-09-25 17:17 2008-10-20 Show GitHub Exploit DB Packet Storm
237688 4.3 警告 Mozilla Foundation - Mozilla Thunderbird におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5430 2012-09-25 17:17 2008-12-13 Show GitHub Exploit DB Packet Storm
237689 4.3 警告 Perion Network - Incredimail におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5429 2012-09-25 17:17 2008-12-11 Show GitHub Exploit DB Packet Storm
237690 4.3 警告 カスペルスキー - Kaspersky Internet Security Suite におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5426 2012-09-25 17:17 2008-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2911 6.1 MEDIUM
Network 		- - Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the im… CWE-79
Cross-site Scripting 		CVE-2026-47119 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2912 6.5 MEDIUM
Network 		- - Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint, whi… CWE-22
Path Traversal 		CVE-2026-47118 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2913 9.8 CRITICAL
Network 		- - FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally calls invocation.invo… CWE-306
Missing Authentication for Critical Function 		CVE-2026-44668 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2914 9.1 CRITICAL
Network 		- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static backend safety sca… CWE-78
OS Command  		CVE-2026-44444 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2915 - - - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/actions_addupdatedelete.inc.php - CVE-2026-37711 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2916 - - - Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate). - CVE-2026-31266 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2917 - - - A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0. - CVE-2026-30498 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2918 2.7 LOW
Network 		gtranslate gtranslate Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.… CWE-471
 Modification of Assumed-Immutable Data (MAID) 		CVE-2026-8492 2026-05-28 00:15 2026-05-20 Show GitHub Exploit DB Packet Storm
2919 9.8 CRITICAL
Network 		date_ical_project date_ical Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15. CWE-862
 Missing Authorization 		CVE-2026-8495 2026-05-28 00:14 2026-05-20 Show GitHub Exploit DB Packet Storm
2920 5.4 MEDIUM
Network 		colorbox_inline_project colorbox_inline Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: fr… CWE-79
Cross-site Scripting 		CVE-2026-8493 2026-05-28 00:08 2026-05-20 Show GitHub Exploit DB Packet Storm