Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239541 7.5 危険 Netwin Ltd - NetWin SurgeMail および WebMail の webmail.exe におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-1055 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
239542 6.4 警告 Netwin Ltd - NetWin SurgeMail の _lib_spawn_user_getpid 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1054 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
239543 6.4 警告 Netwin Ltd - NetWin SurgeFTP の管理 Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-1052 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
239544 5 警告 MoinMoin - MoinMoin の wikimacro.py における保護されたページを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1099 2012-09-25 16:59 2007-08-30 Show GitHub Exploit DB Packet Storm
239545 4.3 警告 MoinMoin - MoinMoin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1098 2012-09-25 16:59 2007-08-28 Show GitHub Exploit DB Packet Storm
239546 7.5 危険 move networks inc - Move Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1044 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
239547 7.5 危険 linuxwebshop - LWS php User Base における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1043 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
239548 6.8 警告 linuxwebshop - LWS php Download Manager の include/body.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1042 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
239549 4.3 警告 matts whois - Matt Wilson MWhois の mwhois.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1041 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
239550 4.3 警告 packeteer - Packeteer PacketShaper などの Web マネージメントインターフェースのファイルリスティング機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1037 2012-09-25 16:59 2008-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3011 7.2 HIGH
Network 		- - The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containin… CWE-22
Path Traversal 		CVE-2026-39276 2026-06-2 03:12 2026-05-30 Show GitHub Exploit DB Packet Storm
3012 5.7 MEDIUM
Network 		- - An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. Th… CWE-200
CWE-269
Information Exposure
 Improper Privilege Management 		CVE-2026-48210 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3013 5.7 MEDIUM
Network 		- - An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS… CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling 		CVE-2026-48187 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3014 9.1 CRITICAL
Network 		- - An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue o… CWE-20
 Improper Input Validation  		CVE-2026-48188 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3015 5.7 MEDIUM
Network 		- - An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled a… CWE-200
Information Exposure 		CVE-2026-48189 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3016 3.5 LOW
Network 		- - An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be… CWE-276
Incorrect Default Permissions  		CVE-2026-48190 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3017 3.5 LOW
Network 		- - An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA an… CWE-276
Incorrect Default Permissions  		CVE-2026-48191 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3018 6.5 MEDIUM
Network 		- - An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to… CWE-400
CWE-791
 Uncontrolled Resource Consumption
 Incomplete Filtering of Special Elements 		CVE-2026-48208 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3019 7.1 HIGH
Network 		- - An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting (XSS) attacks via … CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output 		CVE-2026-48209 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
3020 7.8 HIGH
Local 		- - A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatte… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-10118 2026-06-2 03:12 2026-06-2 Show GitHub Exploit DB Packet Storm