Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243891 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec の shorten.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0858 2012-08-22 14:28 2012-03-15 Show GitHub Exploit DB Packet Storm
243892 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec の atrac3.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0853 2012-08-22 14:28 2012-03-15 Show GitHub Exploit DB Packet Storm
243893 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec の adpcm.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-0852 2012-08-22 14:27 2012-06-9 Show GitHub Exploit DB Packet Storm
243894 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec の h264_ps.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-0851 2012-08-22 14:04 2012-06-9 Show GitHub Exploit DB Packet Storm
243895 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec の kmvc.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3952 2012-08-22 14:02 2012-01-27 Show GitHub Exploit DB Packet Storm
243896 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec 内の dpcm.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3951 2012-08-22 13:52 2012-01-27 Show GitHub Exploit DB Packet Storm
243897 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec 内の mjpegbdec.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3947 2012-08-22 12:33 2012-01-27 Show GitHub Exploit DB Packet Storm
243898 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3940 2012-08-22 12:30 2012-01-27 Show GitHub Exploit DB Packet Storm
243899 4.3 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3936 2012-08-22 12:29 2012-01-27 Show GitHub Exploit DB Packet Storm
243900 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3929 2012-08-22 12:19 2012-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2911 8.8 HIGH
Network 		- - Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Management: from n/a through 93.2.0. CWE-266
 Incorrect Privilege Assignment 		CVE-2025-15656 2026-06-4 22:53 2026-06-3 Show GitHub Exploit DB Packet Storm
2912 6.5 MEDIUM
Network 		- - The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in all versions up to, and including, 4.8.20 due to insufficient escaping on the u… CWE-89
SQL Injection 		CVE-2026-8653 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
2913 7.5 HIGH
Network 		- - The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and including, 4.71. Thi… CWE-862
 Missing Authorization 		CVE-2026-10737 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
2914 7.6 HIGH
Network 		- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection. This issue affects Photo Gallery by 10W… CWE-89
SQL Injection 		CVE-2026-49771 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
2915 5.3 MEDIUM
Network 		- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-49077 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
2916 8.8 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability all… CWE-269
 Improper Privilege Management 		CVE-2026-46837 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
2917 7.4 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability al… CWE-284
Improper Access Control 		CVE-2026-46818 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
2918 9.8 CRITICAL
Network 		oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allo… CWE-269
CWE-287
CWE-306
 Improper Privilege Management
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-46817 2026-06-4 22:45 2026-05-29 Show GitHub Exploit DB Packet Storm
2919 4.9 MEDIUM
Network 		progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text credentials used co… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-7313 2026-06-4 22:12 2026-06-2 Show GitHub Exploit DB Packet Storm
2920 7.5 HIGH
Network 		progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.844… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-7312 2026-06-4 22:09 2026-06-2 Show GitHub Exploit DB Packet Storm