Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245151	4.3	警告	boutikone	-	BoutikOne CMS の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5126	2012-06-26 16:03	2008-11-17	Show	GitHub Exploit DB Packet Storm

245152	6.8	警告	castillocentral	-	CCleague Pro の admin.php における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-5125	2012-06-26 16:03	2008-11-17	Show	GitHub Exploit DB Packet Storm

245153	6.8	警告	castillocentral	-	CCleague Pro の admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5123	2012-06-26 16:03	2008-11-17	Show	GitHub Exploit DB Packet Storm

245154	7.5	危険	Episerver	-	Ektron CMS400.NET における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5122	2012-06-26 16:03	2008-11-17	Show	GitHub Exploit DB Packet Storm

245155	7.2	危険	ブルーコートシステムズシトリックス・システムズシスコシステムズ SafeNet, Inc	-	Cisco VPN Client などの製品で使用される dne2000.sys における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5121	2012-06-26 16:03	2008-07-18	Show	GitHub Exploit DB Packet Storm

245156	9.3	危険	balabit	-	syslog-ng における intented jail を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5110	2012-06-26 16:03	2008-11-17	Show	GitHub Exploit DB Packet Storm

245157	7.2	危険	dcgrendel Canonical	-	Ubuntu におけるログイン制限を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-5104	2012-06-26 16:03	2008-11-13	Show	GitHub Exploit DB Packet Storm

245158	7.2	危険	dcgrendel Canonical	-	Ubuntu の VMBuilder におけるログイン制限を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-5103	2012-06-26 16:03	2008-11-13	Show	GitHub Exploit DB Packet Storm

245159	10	危険	AEF Group	-	Electron Inc. Advanced Electron Forum における任意の PHP コードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-5090	2012-06-26 16:03	2008-11-14	Show	GitHub Exploit DB Packet Storm

245160	9.3	危険	datadynamics	-	Data Dynamics ActiveReports の DDActiveReportsViewer2.ARViewer2 ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	CWE-Other その他	CVE-2008-5089	2012-06-26 16:03	2008-11-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1891	5.3	MEDIUM Network	-	-	SQL Injection vulnerability in uzy-ssm-mall v1.1.0 allows a remote attacker to obtain sensitive information via the ProductMapper.xml and /OrderUtil.java components	CWE-89 SQL Injection	CVE-2026-38808	2026-05-29 01:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

1892	8.8	HIGH Network	-	-	Insecure Permissions vulnerability in kvf-admin v1.0.0 allows a remote attacker to escalate privileges via the UserController.java component	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-38807	2026-05-29 01:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

1893	7.5	HIGH Network	ibm	db2	IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.	CWE-400 Uncontrolled Resource Consumption	CVE-2026-6051	2026-05-29 00:55	2026-05-27	Show	GitHub Exploit DB Packet Storm

1894	7.5	HIGH Network	ibm	db2	IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.	CWE-400 Uncontrolled Resource Consumption	CVE-2026-6052	2026-05-29 00:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1895	5.5	MEDIUM Local	ibm	db2	IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-6053	2026-05-29 00:46	2026-05-27	Show	GitHub Exploit DB Packet Storm

1896	6.5	MEDIUM Network	ibm	i	IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit th…	CWE-674 Uncontrolled Recursion	CVE-2026-6936	2026-05-29 00:46	2026-05-27	Show	GitHub Exploit DB Packet Storm

1897	7.5	HIGH Network	ibm	db2	IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.	CWE-285 Improper Authorization	CVE-2026-6938	2026-05-29 00:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1898	5.5	MEDIUM Local	libusb	libusb	libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed US…	CWE-125 Out-of-bounds Read	CVE-2026-47104	2026-05-29 00:40	2026-05-27	Show	GitHub Exploit DB Packet Storm

1899	6.5	MEDIUM Network	redhat samba	openshift_container_platform samba enterprise_linux	A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to i…	CWE-280 Improper Handling of Insufficient Permissions or Privileges	CVE-2026-2340	2026-05-29 00:33	2026-05-27	Show	GitHub Exploit DB Packet Storm

1900	9.1	CRITICAL Network	golang	crypto	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forward…	CWE-502 Deserialization of Untrusted Data	CVE-2026-39832	2026-05-29 00:11	2026-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed