Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240661 4.3 警告 Netwin Ltd - DNews News Server の cgi-bin/dnewsweb.exe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5370 2012-09-25 16:59 2007-10-11 Show GitHub Exploit DB Packet Storm
240662 5 警告 massive entertainment - Conflict の Massive Entertainment World におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2007-5369 2012-09-25 16:59 2007-10-11 Show GitHub Exploit DB Packet Storm
240663 6.8 警告 Joomla!
Webmaster-Tips
- Joomla! 用の Panoramic Picture View mambot における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5363 2012-09-25 16:59 2007-10-10 Show GitHub Exploit DB Packet Storm
240664 4.3 警告 Mozilla Foundation - Mozilla Firefox における重要なシステム情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-5335 2012-09-25 16:59 2007-08-5 Show GitHub Exploit DB Packet Storm
240665 7.5 危険 マイクロソフト - Microsoft Visual FoxPro 6 の FPOLE.OCX ActiveX コントロールにおける任意のプログラムを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2007-5322 2012-09-25 16:59 2007-10-9 Show GitHub Exploit DB Packet Storm
240666 4 警告 pegasus imaging - Pegasus Imaging ImagXpress における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5320 2012-09-25 16:59 2007-10-9 Show GitHub Exploit DB Packet Storm
240667 6.8 警告 webmaster-tips.net
Joomla!
- Joomla! 用の com_wmtportfolio コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5310 2012-09-25 16:59 2007-10-9 Show GitHub Exploit DB Packet Storm
240668 6.8 警告 webmaster-tips.net
Joomla!
- Joomla! 用の com_wmtgallery コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5309 2012-09-25 16:59 2007-10-9 Show GitHub Exploit DB Packet Storm
240669 6.8 警告 php homepage m - phpHPm の galerie.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5308 2012-09-25 16:59 2007-10-9 Show GitHub Exploit DB Packet Storm
240670 4.3 警告 ヒューレット・パッカード - Linux および Windows の HP-UX および SMH におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5302 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2271 - - - An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAccess function incorre… CWE-287
Improper Authentication
CVE-2026-11345 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2272 - - - A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific proces… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-11346 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2273 - - - The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by th… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-11369 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2274 - - - An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write. When CONFIG_BT_MESH_OD_PRIV_PROXY_SRV is… CWE-787
 Out-of-bounds Write
CVE-2026-5589 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2275 6.3 MEDIUM
Network
- - A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c). When the TLS session cache is enabled, tls_session_… CWE-787
 Out-of-bounds Write
CVE-2026-5066 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2276 4.5 MEDIUM
Local
- - In Mimecast Incydr before 2.6.0, arbitrary file access can occur. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-50590 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2277 7.3 HIGH
Local
- - Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range. CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-50593 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2278 6.3 MEDIUM
Local
- - NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can e… CWE-798
 Use of Hard-coded Credentials
CVE-2026-21404 2026-06-6 01:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2279 - - - A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution. CWE-284
Improper Access Control
CVE-2026-48907 2026-06-6 01:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2280 6.3 MEDIUM
Network
- - Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating… CWE-79
Cross-site Scripting
CVE-2025-65640 2026-06-6 01:04 2026-06-5 Show GitHub Exploit DB Packet Storm