Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5031 7.5 重要
Network 		XiangShan NEMU XiangShanのNEMUにおける複数の脆弱性 CWE-1287
CWE-131
CVE-2026-29645 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
5032 9.8 緊急
Network 		XiangShan NEMU XiangShanのNEMUにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-29649 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
5033 7.5 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-125
CWE-193
CVE-2026-32605 2026-04-27 11:18 2026-04-13 Show GitHub Exploit DB Packet Storm
5034 9.6 緊急
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-1284
CWE-190
CWE-20
CWE-345
CVE-2026-33471 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
5035 9.8 緊急
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-33608 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
5036 6.5 警告
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative ServerにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-33609 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
5037 7.5 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-33610 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
5038 5.3 警告
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-34062 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
5039 7.5 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-34063 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
5040 8.2 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-34064 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
941 8.2 HIGH
Network 		- - PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers… New CWE-89
SQL Injection 		CVE-2019-25732 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
942 8.4 HIGH
Local 		- - NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a… New CWE-120
Classic Buffer Overflow 		CVE-2019-25733 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
943 4.0 MEDIUM
Local 		- - Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that allows unauthenticated attackers to include arbitrary files by exploiting unsanit… New CWE-22
Path Traversal 		CVE-2019-25734 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
944 8.4 HIGH
Local 		- - AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Att… New CWE-120
Classic Buffer Overflow 		CVE-2019-25735 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
945 8.4 HIGH
Local 		- - LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the Host IP field. Attackers can craft a… New CWE-120
Classic Buffer Overflow 		CVE-2019-25736 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
946 9.8 CRITICAL
Network 		- - WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option actio… New CWE-306
Missing Authentication for Critical Function 		CVE-2019-25738 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
947 6.4 MEDIUM
Network 		- - GigToDo 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript and HTML code through the proposal description field. Attackers… New CWE-79
Cross-site Scripting 		CVE-2019-25739 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
948 6.5 MEDIUM
Network 		- - Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requ… New CWE-22
Path Traversal 		CVE-2019-25740 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
949 9.8 CRITICAL
Network 		- - Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to execute arbitrary code… New CWE-120
Classic Buffer Overflow 		CVE-2019-25741 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
950 6.4 MEDIUM
Network 		- - WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through the Address input field when crea… New CWE-79
Cross-site Scripting 		CVE-2019-25742 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm