Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3991	5.3	警告 Network	Elasticsearch B.V.	Kibana	Elasticsearch B.V.のKibanaにおける有効期限後または解放後のリソースの操作に関する脆弱性	CWE-672 有効期限後または解放後のリソースの操作	CVE-2026-33463	2026-06-3 17:02	2026-05-28	Show	GitHub Exploit DB Packet Storm

3992	6.5	警告 Network	Elasticsearch B.V.	Kibana	Elasticsearch B.V.のKibanaにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-33464	2026-06-3 17:02	2026-05-28	Show	GitHub Exploit DB Packet Storm

3993	9.8	緊急 Network	オラクル	Oracle Hospitality OPERA 5 Property Services	オラクルのOracle Hospitality OPERA 5 Property Servicesにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-34311	2026-06-3 17:02	2026-05-28	Show	GitHub Exploit DB Packet Storm

3994	9.8	緊急 Network	IBM	Engineering Lifecycle Management	IBMのEngineering Lifecycle Managementにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-3660	2026-06-3 17:02	2026-05-26	Show	GitHub Exploit DB Packet Storm

3995	7.5	重要 Network	FRRouting Project	FRRouting	FRRouting ProjectのFRRoutingにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-37457	2026-06-3 17:02	2026-05-1	Show	GitHub Exploit DB Packet Storm

3996	7.2	重要 Network	devcode	openstamanager	DevcodeのOpenSTAManagerにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-38751	2026-06-3 17:02	2026-05-4	Show	GitHub Exploit DB Packet Storm

3997	5.5	警告 Local	GPAC	GPAC	GPACにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-39103	2026-06-3 17:02	2026-05-5	Show	GitHub Exploit DB Packet Storm

3998	6.1	警告 Network	heartcombo	devise	heartcomboのdeviseにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-40295	2026-06-3 17:02	2026-05-22	Show	GitHub Exploit DB Packet Storm

3999	5.5	警告 Local	BentoML	BentoML	BentoMLにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-40610	2026-06-3 17:02	2026-05-22	Show	GitHub Exploit DB Packet Storm

4000	4.3	警告 Network	Apache Software Foundation	Apache ActiveMQ Artemis Apache Artemis	Apache Software FoundationのApache ActiveMQ Artemis等の複数製品における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40914	2026-06-3 17:02	2026-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306661	-	smwplus	smw\+	Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initialize.php in Semantic Enterprise Wiki (SMW+) 1.5.6, 1.6.0_2 and earlier allows r…	CWE-79 Cross-site Scripting	CVE-2012-1212	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306662	-	powie	pfile	Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script or HTML via the filecat parameter.	CWE-79 Cross-site Scripting	CVE-2012-1211	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306663	-	powie	pfile	SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2012-1210	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306664	-	fork-cms	fork_cms	Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2012-1209	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306665	-	fork-cms	fork_cms	Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or…	CWE-79 Cross-site Scripting	CVE-2012-1208	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306666	-	fork-cms	fork_cms	Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) …	CWE-22 Path Traversal	CVE-2012-1207	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306667	-	hancom	hancom_office_2010_se	Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the ImportGR in the JPG image filter module…	CWE-189 Numeric Errors	CVE-2012-1206	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306668	-	alanft	relocate-upload	PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath param…	CWE-94 Code Injection	CVE-2012-1205	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306669	-	lepton-cms	lepton	Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to admi…	CWE-79 Cross-site Scripting	CVE-2012-1000	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm

306670	-	lepton-cms	lepton	SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter.	CWE-89 SQL Injection	CVE-2012-0999	2024-11-21 10:36	2012-02-24	Show	GitHub Exploit DB Packet Storm