Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242801 7.5 危険 The PHP Group - PHP の php_variables.c 内の php_register_variable_ex 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-0830 2012-07-24 18:02 2012-02-1 Show GitHub Exploit DB Packet Storm
242802 7.5 危険 PNG Development Group - libpng の pngerror.c におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-189
数値処理の問題
CVE-2011-3464 2012-07-24 16:44 2012-07-22 Show GitHub Exploit DB Packet Storm
242803 2.1 注意 kernel.org - Linux-PAM の modules/pam_env/pam_env.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-3149 2012-07-24 16:43 2012-07-22 Show GitHub Exploit DB Packet Storm
242804 4.6 警告 kernel.org - Linux-PAM の modules/pam_env/pam_env.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3148 2012-07-24 16:39 2012-07-22 Show GitHub Exploit DB Packet Storm
242805 7.5 危険 H. Peter Anvin - tftp-hpa におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2199 2012-07-24 16:38 2011-06-10 Show GitHub Exploit DB Packet Storm
242806 5 警告 ModSecurity - ModSecurity におけるフィルタリングルールを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-5031 2012-07-24 16:21 2012-07-22 Show GitHub Exploit DB Packet Storm
242807 5.5 警告 Moodle - Moodle の mod/data/preset.php における任意のデータベースアクティビティのプリセットが上書きされる脆弱性 CWE-DesignError
CVE-2012-2366 2012-07-24 16:16 2012-07-21 Show GitHub Exploit DB Packet Storm
242808 3.5 注意 Moodle - Moodle の lib/filelib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2364 2012-07-24 16:14 2012-07-21 Show GitHub Exploit DB Packet Storm
242809 6.5 警告 Moodle - Moodle のカレンダーの実装における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2363 2012-07-24 16:10 2012-07-21 Show GitHub Exploit DB Packet Storm
242810 3.5 注意 Moodle - Moodle の Web サービスの実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2361 2012-07-24 16:07 2012-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2951 6.5 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored XSS. This issue affects Team Showcase: from n/a through … CWE-79
Cross-site Scripting
CVE-2025-62745 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2952 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Control Security Levels. This issue … CWE-862
 Missing Authorization
CVE-2026-24527 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2953 4.3 MEDIUM
Network
- - Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1. CWE-352
 Origin Validation Error
CVE-2026-24554 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2954 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0. CWE-862
 Missing Authorization
CVE-2026-24582 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2955 5.4 MEDIUM
Network
- - Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Newses: from n/a through 2.0.0.77. CWE-862
 Missing Authorization
CVE-2026-24586 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2956 5.3 MEDIUM
Network
- - Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affiliate Links: from n/a … CWE-862
 Missing Authorization
CVE-2026-24592 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2957 4.9 MEDIUM
Network
- - Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a before 5.2.10. CWE-862
 Missing Authorization
CVE-2026-27346 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2958 5.3 MEDIUM
Network
- - Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Search Analytics: from n/a befor… CWE-862
 Missing Authorization
CVE-2026-27357 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2959 5.3 MEDIUM
Network
- - Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RSVP and Event Management: from … CWE-862
 Missing Authorization
CVE-2026-27398 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2960 7.2 HIGH
Network
- - Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection. This issue affects Broadcast Live Video: from n/a before 7.1.3. CWE-94
Code Injection
CVE-2026-24937 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm