Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2841	7.8	重要 Local	Google	Android	GoogleのAndroidにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-0089	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2842	7.8	重要 Local	Google	Android	GoogleのAndroidにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-0091	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2843	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-0093	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2844	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-0094	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2845	8	重要 Adjacent	Google	Android	GoogleのAndroidにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-0095	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2846	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-0096	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2847	8	重要 Adjacent	Google	Android	GoogleのAndroidにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-0097	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2848	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるフィルタリングの回避に関する脆弱性	CWE-441 フィルタリング回避	CVE-2026-0098	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2849	7.8	重要 Local	Google	Android	GoogleのAndroidにおける削除された特権に対する不適切なチェックに関する脆弱性	CWE-273 削除された特権に対する不適切なチェック	CVE-2026-0099	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2850	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-0100	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305591	-	moodle	moodle	Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or H…	CWE-79 Cross-site Scripting	CVE-2011-4282	2024-11-21 10:32	2012-07-16	Show	GitHub Exploit DB Packet Storm

305592	-	moodle	moodle	Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of…	CWE-352 Origin Validation Error	CVE-2011-4281	2024-11-21 10:32	2012-07-16	Show	GitHub Exploit DB Packet Storm

305593	-	moodle nimish_pachapurkar	moodle spike_phpcoverage	Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary …	CWE-79 Cross-site Scripting	CVE-2011-4280	2024-11-21 10:32	2012-07-16	Show	GitHub Exploit DB Packet Storm

305594	-	moodle	moodle	Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via…	CWE-200 Information Exposure	CVE-2011-4279	2024-11-21 10:32	2012-07-16	Show	GitHub Exploit DB Packet Storm

305595	-	moodle	moodle	Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2011-4278	2024-11-21 10:32	2012-07-16	Show	GitHub Exploit DB Packet Storm

305596	-	moodle	moodle	Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-4309	2024-11-21 10:32	2012-07-11	Show	GitHub Exploit DB Packet Storm

305597	-	moodle	moodle	mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-4308	2024-11-21 10:32	2012-07-11	Show	GitHub Exploit DB Packet Storm

305598	-	moodle	moodle	Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the sectio…	CWE-79 Cross-site Scripting	CVE-2011-4307	2024-11-21 10:32	2012-07-11	Show	GitHub Exploit DB Packet Storm

305599	-	moodle	moodle	Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.	CWE-79 Cross-site Scripting	CVE-2011-4306	2024-11-21 10:32	2012-07-11	Show	GitHub Exploit DB Packet Storm

305600	-	moodle	moodle	message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshi…	CWE-189 Numeric Errors	CVE-2011-4305	2024-11-21 10:32	2012-07-11	Show	GitHub Exploit DB Packet Storm