Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 401 | 8.1 |
重要
Network |
OpenStack | OpenStack Ironic | OpenStackのOpenStack Ironicにおける相対パストラバーサルの脆弱性 New |
CWE-23
相対的パストラバーサル |
CVE-2026-48681 | 2026-06-8 11:45 | 2026-06-4 | Show | GitHub Exploit DB Packet Storm |
| 402 | 7.8 |
重要
Local |
Open Source Geospatial Foundation | GDAL | Open Source Geospatial FoundationのGDALにおけるスタックベースのバッファオーバーフローの脆弱性 New |
CWE-121
スタックオーバーフロー |
CVE-2026-49014 | 2026-06-8 11:45 | 2026-05-27 | Show | GitHub Exploit DB Packet Storm |
| 403 | 8.8 |
重要
Network |
Authentik Security Inc | authentik | Authentik Security Incのauthentikにおける認証に関する脆弱性 New |
CWE-287
不適切な認証 |
CVE-2026-49443 | 2026-06-8 11:45 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 404 | 9.8 |
緊急
Network |
Authentik Security Inc | authentik | Authentik Security Incのauthentikにおける認証に関する脆弱性 New |
CWE-287
不適切な認証 |
CVE-2026-49448 | 2026-06-8 11:45 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 405 | 5.9 |
警告
Local |
libexpat project | libexpat | libexpat projectのlibexpatにおける解放済みメモリの使用に関する脆弱性 New |
CWE-416
解放済みメモリの使用 |
CVE-2026-50219 | 2026-06-8 11:45 | 2026-06-4 | Show | GitHub Exploit DB Packet Storm |
| 406 | 5.3 |
警告
Network |
morgan project | morgan | morgan projectのmorganにおける不適切なログ出力の無効化に関する脆弱性 New |
CWE-117
不適切なログ出力の無効化 |
CVE-2026-5078 | 2026-06-8 11:45 | 2026-06-3 | Show | GitHub Exploit DB Packet Storm |
| 407 | 9.6 |
緊急
Network |
huggingface | transformers | huggingfaceのtransformersにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 New |
CWE-829
信頼性のない制御領域からの機能の組み込み |
CVE-2026-5241 | 2026-06-8 11:45 | 2026-06-3 | Show | GitHub Exploit DB Packet Storm |
| 408 | 8.1 |
重要
Network |
Progress Software Corporation | Sitefinity | Progress Software CorporationのSitefinityにおける入力確認に関する脆弱性 New |
CWE-20
不適切な入力確認 |
CVE-2026-7195 | 2026-06-8 11:45 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 409 | 9.8 |
緊急
Network |
Progress Software Corporation | Sitefinity | Progress Software CorporationのSitefinityにおけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-7198 | 2026-06-8 11:44 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 410 | 8.8 |
重要
Network |
Progress Software Corporation | Sitefinity | Progress Software CorporationのSitefinityにおけるユーザ制御の鍵による認証回避に関する脆弱性 New |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-7201 | 2026-06-8 11:44 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 9, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258171 | 6.1 |
MEDIUM
Network |
bestwebsoft | contact_form_to_db | The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18492 | 2024-11-21 12:20 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 258172 | 6.1 |
MEDIUM
Network |
bestwebsoft | contact_form | The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18491 | 2024-11-21 12:20 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 258173 | 6.1 |
MEDIUM
Network |
bestwebsoft | contact_form_multi | The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18490 | 2024-11-21 12:20 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 258174 | 6.1 |
MEDIUM
Network |
mediaburst | contact_form_7_-_clockwork_sms | The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2017-18489 | 2024-11-21 12:20 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 258175 | 7.8 |
HIGH
Local |
linux debian canonical |
linux_kernel debian_linux ubuntu_linux |
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop ge… |
CWE-20
Improper Input Validation |
CVE-2017-18509 | 2024-11-21 12:20 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 258176 | 6.1 |
MEDIUM
Network |
bestwebsoft | twitter_button | The twitter-plugin plugin before 2.55 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2017-18505 | 2024-11-21 12:20 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 258177 | 8.8 |
HIGH
Network |
wpdeveloper | twitter_cards_meta | The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF. |
CWE-352
Origin Validation Error |
CVE-2017-18504 | 2024-11-21 12:20 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 258178 | 6.1 |
MEDIUM
Network |
wpdeveloper | twitter_cards_meta | The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2017-18503 | 2024-11-21 12:20 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 258179 | 6.1 |
MEDIUM
Network |
bestwebsoft | subscriber | The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18502 | 2024-11-21 12:20 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 258180 | 6.1 |
MEDIUM
Network |
bestwebsoft | social_login | The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2017-18501 | 2024-11-21 12:20 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |