Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3031	9	緊急 Network	IBM	IBM WebSphere Application Server	IBMのIBM WebSphere Application Serverにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-9311	2026-06-8 11:44	2026-06-1	Show	GitHub Exploit DB Packet Storm

3032	9	緊急 Network	IBM	IBM WebSphere Application Server	IBMのIBM WebSphere Application Serverにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-9319	2026-06-8 11:44	2026-06-1	Show	GitHub Exploit DB Packet Storm

3033	8.5	重要 Network	IBM	IBM WebSphere Application Server	IBMのIBM WebSphere Application Serverにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-9330	2026-06-8 11:44	2026-06-1	Show	GitHub Exploit DB Packet Storm

3034	-	-	（複数のベンダ）	（複数の製品）	Securly Chrome Extensionにおける複数の脆弱性	-	-	2026-06-5 13:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

3035	6.7	警告 Adjacent	TP-Link Systems Inc.	Tapo P300 Tapo L535E Tapo D100C	複数のTP-LINK製品における重要情報の平文送信の脆弱性	CWE-Other その他	CVE-2026-34126	2026-06-5 12:08	2026-06-5	Show	GitHub Exploit DB Packet Storm

3036	9.8	緊急 Network	deltasql Project	deltasql	deltasql Projectのdeltasqlにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25412	2026-06-5 10:52	2026-05-30	Show	GitHub Exploit DB Packet Storm

3037	7.5	重要 Network	WinMTR	WinMTR	WinMTRにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2018-25426	2026-06-5 10:52	2026-05-30	Show	GitHub Exploit DB Packet Storm

3038	7.8	重要 Local	4mhz	Base64 Decoder	4mhzのBase64 Decoderにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2019-25634	2026-06-5 10:52	2026-03-24	Show	GitHub Exploit DB Packet Storm

3039	7.8	重要 Local	Google	Android XR	GoogleのAndroid XRにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-0072	2026-06-5 10:52	2026-06-1	Show	GitHub Exploit DB Packet Storm

3040	9.8	緊急 Network	TRENDnet	TEW-432BRP Firmware	TRENDnetのTEW-432BRP Firmwareにおける複数の脆弱性	CWE-74 CWE-77	CVE-2026-10060	2026-06-5 10:52	2026-05-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305411	-	valthbald	meta_tags_quick	Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or H…	CWE-79 Cross-site Scripting	CVE-2011-5030	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305412	-	alexander_palmo	simple_php_blog	Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry parameter to delete.p…	CWE-79 Cross-site Scripting	CVE-2011-5029	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305413	-	novell	sentinel_log_manager	Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users…	CWE-22 Path Traversal	CVE-2011-5028	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305414	-	zabbix	zabbix	Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.	CWE-79 Cross-site Scripting	CVE-2011-5027	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305415	-	yaws	yaws	Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) t…	CWE-79 Cross-site Scripting	CVE-2011-5025	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305416	-	gnu	mailman	Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via the config parameter.	CWE-79 Cross-site Scripting	CVE-2011-5024	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305417	-	pligg	pligg_cms	Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-…	CWE-79 Cross-site Scripting	CVE-2011-5023	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305418	-	pligg	pligg_cms	SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter.	CWE-89 SQL Injection	CVE-2011-5022	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305419	-	winn	winn_guestbook	Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name para…	CWE-79 Cross-site Scripting	CVE-2011-5026	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305420	-	phpids	phpids	PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified ve…	CWE-94 Code Injection	CVE-2011-5021	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm