Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245891	4.6	警告	freedesktop.org	-	PolicyKit の grant helper におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2008-1658	2012-06-26 16:02	2008-03-31	Show	GitHub Exploit DB Packet Storm

245892	7.5	危険	アドビシステムズ	-	Adobe ColdFusion における CFC メソッドを呼び出される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1656	2012-06-26 16:02	2008-04-8	Show	GitHub Exploit DB Packet Storm

245893	9.3	危険	chilkat software	-	ChilkatHttp.dll の ChilkatHttp.ChilkatHttp.1 ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-1647	2012-06-26 16:02	2008-04-2	Show	GitHub Exploit DB Packet Storm

245894	7.5	危険	arnos toolbox WordPress.org	-	WordPress の WP-Download プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1646	2012-06-26 16:02	2008-04-2	Show	GitHub Exploit DB Packet Storm

245895	7.5	危険	efestech	-	EfesTECH Video の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1641	2012-06-26 16:02	2008-04-2	Show	GitHub Exploit DB Packet Storm

245896	7.5	危険	emedia office gmbh	-	CuteFlow における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1632	2012-06-26 16:02	2008-04-2	Show	GitHub Exploit DB Packet Storm

245897	7.5	危険	emedia office gmbh	-	CuteFlow の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1631	2012-06-26 16:02	2008-04-2	Show	GitHub Exploit DB Packet Storm

245898	4.3	警告	emedia office gmbh	-	CuteFlow におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1630	2012-06-26 16:02	2008-04-2	Show	GitHub Exploit DB Packet Storm

245899	3.5	注意	cds software consortium	-	CDS Invenio における任意のユーザの電子メール通知アラートを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1627	2012-06-26 16:02	2008-04-2	Show	GitHub Exploit DB Packet Storm

245900	7.5	危険	eggblog	-	eggBlog における SQL インジェクションの脆弱性	CWE-20 CWE-89	CVE-2008-1626	2012-06-26 16:02	2008-03-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
691	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Con… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-53440	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

692	7.5	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local File Inclusion. This issue affec… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-58024	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

693	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2025-58705	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

694	8.1	HIGH Network	-	-	Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6. New	CWE-502 Deserialization of Untrusted Data	CVE-2026-39550	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

695	8.1	HIGH Network	-	-	Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1. New	CWE-502 Deserialization of Untrusted Data	CVE-2026-39551	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

696	7.5	HIGH Network	-	-	Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0. New	CWE-862 Missing Authorization	CVE-2026-42669	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

697	9.3	CRITICAL Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a throu… New	CWE-89 SQL Injection	CVE-2026-42684	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

698	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS. This issue affects WP Job Portal: from n/a through 2.5… New	CWE-79 Cross-site Scripting	CVE-2026-42685	2026-06-2 22:03	2026-06-2	Show	GitHub Exploit DB Packet Storm

699	6.5	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin Update	CWE-863 Incorrect Authorization	CVE-2026-49376	2026-06-2 21:39	2026-05-30	Show	GitHub Exploit DB Packet Storm

700	4.3	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters Update	CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable	CVE-2026-49377	2026-06-2 21:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed