Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239051 5 警告 IBM - IBM Tivoli Provisioning Manager Express における username を列挙される脆弱性 CWE-200
情報漏えい
CVE-2007-6408 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
239052 2.1 注意 geert moernaut - Geert Moernaut LSrunasE などにおける平文のパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2007-6340 2012-09-25 16:59 2008-02-4 Show GitHub Exploit DB Packet Storm
239053 4.3 警告 IBM - IBM Tivoli Provisioning Manager Express におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6407 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
239054 6.5 警告 myupb - Flat PHP Board の index.php におけるカレントユーザアカウントのパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2007-6399 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
239055 7.5 危険 myupb - Flat PHP Board の index.php における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2007-6396 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
239056 7.5 危険 p3mbo - Content Injector の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6394 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
239057 9.3 危険 マイクロソフト
Intuit
vantage linquistics
- Vantage Linguistics AnswerWorks におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6387 2012-09-25 16:59 2007-12-11 Show GitHub Exploit DB Packet Storm
239058 2.1 注意 Kerio Technologies - Kerio WinRoute Firewall のプロキシサーバにおける脆弱性 CWE-287
不適切な認証
CVE-2007-6385 2012-09-25 16:59 2007-12-14 Show GitHub Exploit DB Packet Storm
239059 7.1 危険 ノキア - RM-159 ファームウェアを伴う Nokia N95 携帯電話におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-6371 2012-09-25 16:59 2007-12-14 Show GitHub Exploit DB Packet Storm
239060 4.3 警告 jlmforo system - JLMForo System の modificarPerfil.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6364 2012-09-25 16:59 2007-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2961 9.3 CRITICAL
Network
- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the component override system transpiles user-supplied TSX via Sucrase and evaluates it with new Function, shadowing dangerous global… CWE-693
 Protection Mechanism Failure
CVE-2026-44451 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2962 4.3 MEDIUM
Network
- - PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality CWE-79
Cross-site Scripting
CVE-2026-36239 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2963 5.2 MEDIUM
Adjacent
- - SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts VIEW intents with javascript: URI… CWE-79
Cross-site Scripting
CVE-2025-68709 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2964 9.8 CRITICAL
Network
ibm websphere_application_server IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code executi… CWE-94
Code Injection
CVE-2026-8633 2026-05-28 03:12 2026-05-27 Show GitHub Exploit DB Packet Storm
2965 7.8 HIGH
Local
openvpn connect Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel CWE-78
CWE-267
CWE-270
CWE-648
OS Command 
 Privilege Defined With Unsafe Actions
 Privilege Context Switching Error
 Incorrect Use of Privileged APIs
CVE-2026-9560 2026-05-28 03:08 2026-05-27 Show GitHub Exploit DB Packet Storm
2966 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2. CWE-862
 Missing Authorization
CVE-2026-49054 2026-05-28 02:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2967 9.1 CRITICAL
Network
- - HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets magic prefixes: '| cm… CWE-73
CWE-78
 External Control of File Name or Path
OS Command 
CVE-2026-8450 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2968 7.3 HIGH
Network
- - IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in … CWE-95
Eval Injection
CVE-2026-48962 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2969 - - - Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available… CWE-506
 Embedded Malicious Code
CVE-2026-48027 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2970 6.5 MEDIUM
Network
- - e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how session_handler::check… CWE-285
CWE-352
Improper Authorization
 Origin Validation Error
CVE-2026-46620 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm