Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255111 10 危険 IBM - IBM Lotus Domino の SMTP サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0916 2011-04-26 11:06 2011-02-8 Show GitHub Exploit DB Packet Storm
255112 10 危険 IBM - IBM Lotus Domino の nrouter.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0915 2011-04-26 11:05 2011-02-8 Show GitHub Exploit DB Packet Storm
255113 10 危険 IBM - IBM Lotus Domino の ndiiop.exe における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0914 2011-04-26 11:04 2011-02-8 Show GitHub Exploit DB Packet Storm
255114 10 危険 IBM - IBM Lotus Domino の ndiiop.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0913 2011-04-26 11:03 2011-02-8 Show GitHub Exploit DB Packet Storm
255115 9.3 危険 IBM - IBM Lotus Notes における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0912 2011-04-26 11:02 2010-07-26 Show GitHub Exploit DB Packet Storm
255116 6.8 警告 アップル - Apple Mac OS X の ImageIO における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0194 2011-04-26 10:58 2011-03-23 Show GitHub Exploit DB Packet Storm
255117 6.8 警告 アップル - Apple Mac OS X の Image RAW におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0193 2011-04-26 10:57 2011-03-23 Show GitHub Exploit DB Packet Storm
255118 1.9 注意 サイバートラスト株式会社
Postfix Project
レッドハット		 - Postfix における e-mail メッセージが漏えいする脆弱性 CWE-200
情報漏えい 		CVE-2008-2937 2011-04-26 08:48 2008-08-18 Show GitHub Exploit DB Packet Storm
255119 4.3 警告 アップル - Apple Mac OS X の Install Helper におけるユーザのログイン情報を追跡される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0190 2011-04-25 11:31 2011-03-23 Show GitHub Exploit DB Packet Storm
255120 5 警告 アップル - Apple Mac OS X のデフォルト設定されたターミナルにおける SSH サーバになりすまされる脆弱性 CWE-16
環境設定 		CVE-2011-0189 2011-04-25 11:27 2011-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
6151 8.5 HIGH
Network 		- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affe… CWE-89
SQL Injection 		CVE-2026-45211 2026-05-12 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
6152 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset … CWE-862
 Missing Authorization 		CVE-2026-45212 2026-05-12 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
6153 7.6 HIGH
Network 		- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a thro… CWE-89
SQL Injection 		CVE-2026-45213 2026-05-12 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
6154 8.5 HIGH
Network 		- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Blind SQL Injection.This issue affects Xp… CWE-89
SQL Injection 		CVE-2026-45214 2026-05-12 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
6155 5.3 MEDIUM
Network 		- - Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through <= 4.3.0. CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-45215 2026-05-12 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
6156 7.7 HIGH
Network 		- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This issue affects WP Travel: from n/a t… CWE-89
SQL Injection 		CVE-2026-45218 2026-05-12 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
6157 4.8 MEDIUM
Network 		weblate wlc wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting… CWE-79
Cross-site Scripting 		CVE-2026-42150 2026-05-12 23:00 2026-05-8 Show GitHub Exploit DB Packet Storm
6158 3.3 LOW
Network 		kimai kimai Kimai is an open-source time tracking application. Prior to version 2.54.0, the Team API endpoints use #[IsGranted('edit_team')] instead of #[IsGranted('edit', 'team')], causing Symfony TeamVoter to … CWE-862
 Missing Authorization 		CVE-2026-41498 2026-05-12 22:59 2026-05-8 Show GitHub Exploit DB Packet Storm
6159 6.5 MEDIUM
Network 		onyx onyx Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uploaded files by provi… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-42277 2026-05-12 22:58 2026-05-8 Show GitHub Exploit DB Packet Storm
6160 5.9 MEDIUM
Network 		elabftw elabftw eLabFTW is an open source electronic lab notebook. In elabftw versions through 5.4.1, the login flow did not reliably preserve the multi-factor authentication state across authentication steps. Under… CWE-302
 Authentication Bypass by Assumed-Immutable Data 		CVE-2026-28510 2026-05-12 22:58 2026-05-5 Show GitHub Exploit DB Packet Storm