Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238941 6.8 警告 MoinMoin - MoinMoin におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6603 2012-09-25 17:27 2009-04-3 Show GitHub Exploit DB Packet Storm
238942 5 警告 jath pala - CookieCheck の cookiecheck.php におけるセッションデータを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6599 2012-09-25 17:27 2009-04-3 Show GitHub Exploit DB Packet Storm
238943 7.5 危険 LightNEasy
SQLite		 - LightNEasy SQLite の LightNEasy/lightneasy.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6593 2012-09-25 17:27 2009-04-3 Show GitHub Exploit DB Packet Storm
238944 7.5 危険 LightNEasy
SQLite		 - Thumbs-Up の thumbsup.php における任意のファイルを読まれる脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6592 2012-09-25 17:27 2009-04-3 Show GitHub Exploit DB Packet Storm
238945 5 警告 LightNEasy - LightNEasy における任意のファイルを作成される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6591 2012-09-25 17:27 2009-04-3 Show GitHub Exploit DB Packet Storm
238946 5 警告 LightNEasy
SQLite		 - LightNEasy におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6590 2012-09-25 17:27 2009-04-3 Show GitHub Exploit DB Packet Storm
238947 4.3 警告 LightNEasy
SQLite		 - LightNEasy におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6589 2012-09-25 17:27 2009-04-3 Show GitHub Exploit DB Packet Storm
238948 7.5 危険 miniweb2 - Miniweb の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6582 2012-09-25 17:27 2009-04-2 Show GitHub Exploit DB Packet Storm
238949 7.5 危険 phpaddedit - PhpAddEdit の login.php における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6581 2012-09-25 17:27 2009-04-2 Show GitHub Exploit DB Packet Storm
238950 4.3 警告 LinPHA - LinPHA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6571 2012-09-25 17:27 2008-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.7 MEDIUM
Local 		- - A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges … CWE-122
Heap-based Buffer Overflow 		CVE-2026-48914 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
622 - - - A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remedia… CWE-325
 Missing Required Cryptographic Step 		CVE-2026-9266 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
623 8.7 HIGH
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combined with the bridge's… CWE-693
 Protection Mechanism Failure 		CVE-2026-47135 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
624 10.0 CRITICAL
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: t… CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-47137 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
625 8.6 HIGH
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target o… CWE-693
 Protection Mechanism Failure 		CVE-2026-47209 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
626 8.0 HIGH
Network 		microsoft sharepoint_server Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-285
Improper Authorization 		CVE-2026-47298 2026-06-13 01:00 2026-06-10 Show GitHub Exploit DB Packet Storm
627 8.8 HIGH
Network 		- - The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operat… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-12059 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
628 6.5 MEDIUM
Network 		- - Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim … CWE-749
 Exposed Dangerous Method or Function 		CVE-2026-12060 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
629 4.9 MEDIUM
Network 		- - The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended director… CWE-22
Path Traversal 		CVE-2026-11844 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
630 7.2 HIGH
Network 		- - The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute … CWE-78
OS Command  		CVE-2026-11845 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm