Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239281 4.3 警告 The PHP Group
ioncube
- PHP の ionCube Loader 拡張の ioncube_loader_win_5.2.dll における制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5447 2012-09-25 16:59 2007-10-14 Show GitHub Exploit DB Packet Storm
239282 6.4 警告 perfection bytes - PBEmail 7 ActiveX Edition の PBEmail7Ax.dll における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5446 2012-09-25 16:59 2007-10-14 Show GitHub Exploit DB Packet Storm
239283 7.8 危険 scottmanktelow
javaatwork
- Stride の MyFTPUploader モジュールにおける FTP サーバに不正アクセスされる脆弱性 CWE-200
情報漏えい
CVE-2007-5431 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
239284 5 警告 Layton Technology - Layton HelpBox における有効なユーザ名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2007-5404 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
239285 3.5 注意 Layton Technology - Layton HelpBox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5403 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
239286 6.5 警告 Layton Technology - Layton HelpBox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5402 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
239287 6.5 警告 Layton Technology - Layton HelpBox の uploadrequest.asp における任意の ASP ファイルを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5401 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
239288 4.3 警告 Nucleus - Nucleus の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5429 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
239289 4.3 警告 Joomla! - Joomla! 用の com_search コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5427 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
239290 4.3 警告 interspire - ActiveKB NX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5426 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 7.5 HIGH
Network
solarwinds serv-u SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure custo… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-28318 2026-06-6 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm
282 7.3 HIGH
Network
- - A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipu… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-11344 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
283 7.3 HIGH
Network
- - A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sq… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-11342 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
284 6.3 MEDIUM
Network
- - A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_value causes os comman… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-11341 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
285 - - - OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functi… New CWE-284
Improper Access Control
CVE-2026-11326 2026-06-6 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm
286 4.3 MEDIUM
Network
- - Insufficient policy enforcement in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity:… New CWE-346
 Origin Validation Error
CVE-2026-11178 2026-06-6 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm
287 8.8 HIGH
Network
- - Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted… New CWE-416
 Use After Free
CVE-2026-11177 2026-06-6 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm
288 6.5 MEDIUM
Network
- - Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) New CWE-346
 Origin Validation Error
CVE-2026-11176 2026-06-6 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm
289 8.8 HIGH
Network
- - Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) New CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-11175 2026-06-6 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm
290 5.3 MEDIUM
Network
- - Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML p… New CWE-693
 Protection Mechanism Failure
CVE-2026-11174 2026-06-6 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm