Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240141 7.5 危険 okulumunsitesi - Okul Otomasyon Portal の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5490 2012-09-25 16:59 2007-10-17 Show GitHub Exploit DB Packet Storm
240142 7.5 危険 kwsphp - KwsPHP の mg2 モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5485 2012-09-25 16:59 2007-10-16 Show GitHub Exploit DB Packet Storm
240143 4.3 警告 innovaage - InnovaAge InnovaShop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5480 2012-09-25 16:59 2007-10-16 Show GitHub Exploit DB Packet Storm
240144 4.3 警告 nabh information systems - Nabh Stringbeans Portal のプロジェクトにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5478 2012-09-25 16:59 2007-10-16 Show GitHub Exploit DB Packet Storm
240145 5 警告 Mono Project - Mono の System.Web の StaticFileHandler.cs における重要なファイルのソースコードを取得される脆弱性 CWE-200
情報漏えい
CVE-2007-5473 2012-09-25 16:59 2007-10-18 Show GitHub Exploit DB Packet Storm
240146 2.1 注意 マイクロソフト - Microsoft Expression Media におけるカタログへのアクセス権を取得される脆弱性 CWE-200
CWE-310
CVE-2007-5470 2012-09-25 16:59 2007-10-15 Show GitHub Exploit DB Packet Storm
240147 7.5 危険 mydoop - doop CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5465 2012-09-25 16:59 2007-10-15 Show GitHub Exploit DB Packet Storm
240148 6.5 警告 lfs - Live for Speed におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5464 2012-09-25 16:59 2007-10-15 Show GitHub Exploit DB Packet Storm
240149 7.1 危険 マイクロソフト - Windows Mobile などで使用される Microsoft ActiveSync におけるPIN/Password を解読される脆弱性 CWE-310
暗号の問題
CVE-2007-5460 2012-09-25 16:59 2007-10-15 Show GitHub Exploit DB Packet Storm
240150 6.8 警告 michael dempfle
Joomla!
- Joomla! 用の com_jfu or com_joomla_flash_uploader における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5457 2012-09-25 16:59 2007-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 7.8 HIGH
Local
- - Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands und… New CWE-88
Argument Injection
CVE-2026-52750 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
282 7.7 HIGH
Network
- - Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the… New CWE-22
Path Traversal
CVE-2026-49957 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
283 8.8 HIGH
Network
- - Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE … New CWE-89
SQL Injection
CVE-2026-49498 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
284 3.3 LOW
Local
- - Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attacke… New CWE-22
Path Traversal
CVE-2026-49497 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
285 5.4 MEDIUM
Network
- - Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a stored cross-site scripting vulnerability in the course search functionality that allows authenticated Banner ERP user… New CWE-79
Cross-site Scripting
CVE-2026-47106 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
286 7.7 HIGH
Network
- - OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.1, a stored cross-site scripting vulnerability in the prescription CSS/… New CWE-79
CWE-862
Cross-site Scripting
 Missing Authorization
CVE-2026-46518 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
287 7.8 HIGH
Local
- - LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, LMDeploy is vulnerable to arbitrary code execution through hardcoded "trust_remote_c… New CWE-94
Code Injection
CVE-2026-46432 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
288 - - - An improper implementation of TLS certificate validation vulnerability found in ReadyCloud client app which can allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting prod… New CWE-325
 Missing Required Cryptographic Step
CVE-2026-0420 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
289 - - - Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… New CWE-20
 Improper Input Validation 
CVE-2026-0415 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
290 - - - Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… New CWE-94
Code Injection
CVE-2026-0414 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm