Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3621 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-10928 2026-06-8 12:24 2026-06-4 Show GitHub Exploit DB Packet Storm
3622 9.9 緊急
Network 		ABB T-MAC Plus ABBのT-MAC Plusにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2025-14771 2026-06-8 11:51 2026-06-3 Show GitHub Exploit DB Packet Storm
3623 8.8 重要
Network 		ABB T-MAC Plus ABBのT-MAC Plusにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2025-14772 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3624 5.4 警告
Network 		ABB T-MAC Plus ABBのT-MAC Plusにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-14773 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3625 7.4 重要
Adjacent 		ABB T-MAC Plus ABBのT-MAC Plusにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-14774 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3626 5.4 警告
Network 		Koha Koha Kohaにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-26378 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3627 7.8 重要
Local 		Canonical Ubuntu CanonicalのUbuntuにおける権限の連鎖に関する脆弱性 CWE-268
権限の連鎖 		CVE-2026-3888 2026-06-8 11:50 2026-03-17 Show GitHub Exploit DB Packet Storm
3628 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-49185 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3629 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49186 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3630 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-49187 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306361 - qualcomm yagattatalk_messenger Unspecified vulnerability in the YagattaTalk Messenger (com.iskoot.yagatta.yagattatalk) application 1.00.01.08 for Android has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2012-1475 2024-11-21 10:37 2012-03-14 Show GitHub Exploit DB Packet Storm
306362 - sdo youni_sms Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2012-1474 2024-11-21 10:37 2012-03-14 Show GitHub Exploit DB Packet Storm
306363 - gnu gnutls Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certifi… CWE-399
 Resource Management Errors 		CVE-2012-1663 2024-11-21 10:37 2012-03-14 Show GitHub Exploit DB Packet Storm
306364 - vmware vcenter_chargeback_manager VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified … CWE-20
 Improper Input Validation  		CVE-2012-1472 2024-11-21 10:37 2012-03-13 Show GitHub Exploit DB Packet Storm
306365 - yassl cyassl yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate. CWE-399
 Resource Management Errors 		CVE-2012-1558 2024-11-21 10:37 2012-03-13 Show GitHub Exploit DB Packet Storm
306366 - parallels parallels_plesk_panel SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 10.2.x before MU#16, … CWE-89
SQL Injection 		CVE-2012-1557 2024-11-21 10:37 2012-03-13 Show GitHub Exploit DB Packet Storm
306367 - microsoft ie
internet_explorer 		Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integ… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1545 2024-11-21 10:37 2012-03-9 Show GitHub Exploit DB Packet Storm
306368 - movabletype movable_type_open_source
movable_type_enterprise
movable_type_advanced
movable_type_pro 		The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory t… CWE-22
Path Traversal 		CVE-2012-1497 2024-11-21 10:37 2012-03-3 Show GitHub Exploit DB Packet Storm
306369 9.8 CRITICAL
Network 		404like_project 404like A vulnerability was found in 404like Plugin up to 1.0.2 on WordPress. It has been classified as critical. Affected is the function checkPage of the file 404Like.php. The manipulation of the argument … - CVE-2012-10009 2024-11-21 10:36 2023-03-21 Show GitHub Exploit DB Packet Storm
306370 8.8 HIGH
Network 		bestwebsoft portfolio A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request fo… - CVE-2012-10017 2024-11-21 10:36 2023-12-26 Show GitHub Exploit DB Packet Storm