Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3291	7	重要 Local		-	アップルのmacOSにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2025-46284	2026-05-29 11:18	2026-05-26	Show	GitHub Exploit DB Packet Storm

3292	5.5	警告 Local		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-46307	2026-05-29 11:18	2026-05-26	Show	GitHub Exploit DB Packet Storm

3293	7.5	重要 Network	WSO2	WSO2 Universal Gateway WSO2 API Control Plane WSO2 API Manager WSO2 Traffic Manager	WSO2のWSO2 API Control Plane等の複数製品におけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2025-8154	2026-05-29 11:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

3294	8.8	重要 Network	WSO2	WSO2 Universal Gateway WSO2 API Control Plane WSO2 API Manager WSO2 Traffic Manager	WSO2のWSO2 API Control Plane等の複数製品におけるパーミッションの不適切な保持に関する脆弱性	CWE-281 パーミッションの不適切な保持	CVE-2025-8325	2026-05-29 11:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

3295	7.2	重要 Network	WSO2	WSO2 Identity Server	WSO2のWSO2 Identity Serverにおける複数の脆弱性	CWE-284 CWE-863	CVE-2025-9973	2026-05-29 11:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

3296	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-1402	2026-05-29 11:18	2026-05-27	Show	GitHub Exploit DB Packet Storm

3297	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-23292	2026-05-29 11:18	2026-03-25	Show	GitHub Exploit DB Packet Storm

3298	9.8	緊急 Network	マイクロソフト	Microsoft Power Pages	Microsoft Power Pages Remote Code Execution Vulnerability	CWE-77 コマンドインジェクション	CVE-2026-23652	2026-05-29 11:18	2026-05-22	Show	GitHub Exploit DB Packet Storm

3299	7.1	重要 Network	lfprojects	mlflow	lfprojectsのmlflowにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-2393	2026-05-29 11:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

3300	4.7	警告 Local	NVIDIA	gpu display driver	NVIDIAのgpu display driverにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-24199	2026-05-29 11:18	2026-05-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305251	-	docebo	docebolms	Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher…	CWE-89 SQL Injection	CVE-2011-5135	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

305252	-	widgetfactorylimited	com_jce	Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arb…	NVD-CWE-Other	CVE-2011-5134	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

305253	-	mybb	mybb	Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."	NVD-CWE-noinfo	CVE-2011-5133	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

305254	-	mybb	mybb	Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."	CWE-79 Cross-site Scripting	CVE-2011-5132	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

305255	-	mybb	mybb	Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the …	CWE-352 Origin Validation Error	CVE-2011-5131	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

305256	-	haudenschilt	family_connections_cms	dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.	CWE-94 Code Injection	CVE-2011-5130	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

305257	-	xchat	xchat	Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-5129	2024-11-21 10:33	2012-08-31	Show	GitHub Exploit DB Packet Storm

305258	-	bueltge	adminimize	Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) in…	CWE-79 Cross-site Scripting	CVE-2011-5128	2024-11-21 10:33	2012-08-29	Show	GitHub Exploit DB Packet Storm

305259	-	bueltge	adminimize	Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the …	CWE-79 Cross-site Scripting	CVE-2011-4926	2024-11-21 10:33	2012-08-29	Show	GitHub Exploit DB Packet Storm

305260	-	elxis	elxis_cms	Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attackers to inject arbitrary web script or HTML via the (1) tas…	CWE-79 Cross-site Scripting	CVE-2011-4918	2024-11-21 10:33	2012-08-29	Show	GitHub Exploit DB Packet Storm