Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249241 7.5 危険 dbscripts - DBImageGallery における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-1164 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249242 7.8 危険 common controls replacement project - CCRP BrowseDialog Server の ccrpbds6.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1162 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249243 4.3 警告 call-center-software - Call Center Software の call_entry.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-1161 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249244 7.5 危険 CutePHP - CutePHP CuteNews における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-1153 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249245 7.5 危険 delmaa.com - arabhost の function.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1146 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249246 5 警告 comscripts - J-Web Pics Navigator の jwpn-photos.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1144 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249247 9.4 危険 barekoncept - pheap の edit.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1140 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249248 10 危険 cromosoft - Cromosoft SPP における任意のスクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2007-1139 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249249 5 警告 cromosoft - Cromosoft SPP の list_main_pages.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1138 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
249250 6.8 警告 efiction - eFiction における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1118 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
341 - - - Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on V… New CWE-94
CWE-95
Code Injection
Eval Injection
CVE-2026-47167 2026-06-12 05:56 2026-06-12 Show GitHub Exploit DB Packet Storm
342 - - - Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pyth… New CWE-94
CWE-95
CWE-829
Code Injection
Eval Injection
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-52858 2026-06-12 05:56 2026-06-12 Show GitHub Exploit DB Packet Storm
343 - - - Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snaps… New CWE-125
Out-of-bounds Read
CVE-2026-52859 2026-06-12 05:56 2026-06-12 Show GitHub Exploit DB Packet Storm
344 - - - Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec() as p… New CWE-94
Code Injection
CVE-2026-52860 2026-06-12 05:56 2026-06-12 Show GitHub Exploit DB Packet Storm
345 6.5 MEDIUM
Network
- - An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gst_h266_parser_parse_picture_partiti… New CWE-787
 Out-of-bounds Write
CVE-2026-53701 2026-06-12 05:56 2026-06-12 Show GitHub Exploit DB Packet Storm
346 6.5 MEDIUM
Network
- - A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop bound derived from… New CWE-787
 Out-of-bounds Write
CVE-2026-53702 2026-06-12 05:56 2026-06-12 Show GitHub Exploit DB Packet Storm
347 - - - Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security c… New CWE-295
Improper Certificate Validation 
CVE-2026-45175 2026-06-12 05:56 2026-06-12 Show GitHub Exploit DB Packet Storm
348 - - - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system ter… New - CVE-2025-24165 2026-06-12 05:51 2026-06-12 Show GitHub Exploit DB Packet Storm
349 - - - This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data. New - CVE-2025-43278 2026-06-12 05:51 2026-06-12 Show GitHub Exploit DB Packet Storm
350 - - - A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. New - CVE-2025-46313 2026-06-12 05:51 2026-06-12 Show GitHub Exploit DB Packet Storm