Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245481 7.5 危険 fipsasp - fipsASP fipsCMS の modules/print.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2124 2012-06-26 16:02 2008-05-9 Show GitHub Exploit DB Packet Storm
245482 4.3 警告 Digium - Asterisk Open Source および Business Edition におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2119 2012-06-26 16:02 2008-05-8 Show GitHub Exploit DB Packet Storm
245483 6.8 警告 Activision Publishing - Call of Duty におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2106 2012-06-26 16:02 2008-05-7 Show GitHub Exploit DB Packet Storm
245484 6.8 警告 backlinkspider - BackLinkSpider における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2096 2012-06-26 16:02 2008-05-7 Show GitHub Exploit DB Packet Storm
245485 7.5 危険 actualscripts - ActualScripts ActualAnalyzer Lite の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2076 2012-06-26 16:02 2008-05-5 Show GitHub Exploit DB Packet Storm
245486 4.3 警告 astrocam - AstroCam の pic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2075 2012-06-26 16:02 2008-05-5 Show GitHub Exploit DB Packet Storm
245487 4.3 警告 cPanel - cPanel の WHM インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-2071 2012-06-26 16:02 2008-05-12 Show GitHub Exploit DB Packet Storm
245488 4.3 警告 cPanel - cPanel の WHM インターフェースにおける任意の Web スクリプトを挿入される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2070 2012-06-26 16:02 2008-05-12 Show GitHub Exploit DB Packet Storm
245489 4.3 警告 Bitrix - Bitrix Site Manager の redirect.php におけるオープンリダイレクトの脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-2052 2012-06-26 16:02 2008-05-2 Show GitHub Exploit DB Packet Storm
245490 4.3 警告 e-post corporation - E-Post Mail Server の EPSTPOP3S.EXE における重要な情報が取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2049 2012-06-26 16:02 2008-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 5.4 MEDIUM
Network 		- - A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects the function process_resend_queue of the component Connection State Management. This manipulation causes use after free… CWE-119
CWE-416
Incorrect Access of Indexable Resource ('Range Error') 
 Use After Free 		CVE-2026-4390 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1232 6.6 MEDIUM
Network 		- - Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-48917 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1233 8.1 HIGH
Network 		pavel-odintsov fastnetmon FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/juniper_plugin/fastnetmon_juniper.php (l… CWE-78
OS Command  		CVE-2026-48687 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1234 8.5 HIGH
Network 		- - Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping the blacklist.isBlacklisted check th… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-48153 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1235 8.1 HIGH
Network 		- - Budibase is an open-source low-code platform. Prior to 3.39.0, the single-datasource GET and PUT routes are guarded by generic TABLE READ, not by Builder/Admin permission or datasource-specific owner… CWE-863
 Incorrect Authorization 		CVE-2026-48152 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1236 9.0 CRITICAL
Network 		- - Budibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/roles/assign is guarded by the builderOrAdmin middleware, which passes any user who is a builder for the app id in the x-… CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-48150 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1237 - - - Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Budibase accepts a host parameter that undergoes no validation against internal IP ranges, reser… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-48148 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1238 6.5 MEDIUM
Network 		- - Budibase is an open-source low-code platform. Prior to 3.35.4, the buildMatcherRegex() / matches() functions in packages/backend-core/src/middleware/matchers.ts route patterns are compiled into unanc… CWE-185
CWE-352
 Incorrect Regular Expression
 Origin Validation Error 		CVE-2026-48147 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1239 - - - Budibase is an open-source low-code platform. Prior to 3.39.0, the executeQuery automation step in Budibase accepts a queryId from automation step inputs and passes it directly to the query execution… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-48128 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1240 7.6 HIGH
Network 		- - Budibase is an open-source low-code platform. Prior to 3.38.2, the file upload endpoint POST /api/attachments/process does not enforce active-content restrictions for authenticated users. The checks … CWE-79
CWE-434
Cross-site Scripting
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-46426 2026-05-28 03:16 2026-05-28 Show GitHub Exploit DB Packet Storm