Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133721	6.1	警告 Network	MyBB Group	MyBB	MyBB におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-27889	2021-11-22 12:28	2021-03-11	Show	GitHub Exploit DB Packet Storm

133722	9.8	緊急 Network	ShopXO	ShopXO	shopxo における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2021-27817	2021-11-22 12:28	2021-03-15	Show	GitHub Exploit DB Packet Storm

133723	6.1	警告 Network	openMAINT	openMAINT	openMAINT におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-27695	2021-11-22 12:28	2021-03-13	Show	GitHub Exploit DB Packet Storm

133724	9.8	緊急 Network	Facebook	HipHop Virtual Machine (HHVM)	HHVM における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2020-1917	2021-11-22 12:19	2021-02-25	Show	GitHub Exploit DB Packet Storm

133725	9.8	緊急 Network	Facebook	HipHop Virtual Machine (HHVM)	HHVM における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2020-1916	2021-11-22 12:19	2020-11-12	Show	GitHub Exploit DB Packet Storm

133726	6.1	警告 Network	SAP	SAP Netweaver Application Server Java	SAP Netweaver Application Server Java におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2021-21491	2021-11-22 12:19	2021-03-10	Show	GitHub Exploit DB Packet Storm

133727	6.5	警告 Network	IBM	IBM WebSphere Application Server	IBM WebSphere Application Server におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2020-5016	2021-11-22 12:19	2021-03-9	Show	GitHub Exploit DB Packet Storm

133728	6.5	警告 Adjacent	vagrant project	gradle-vagrant-plugin	gradle-vagrant-plugin におけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2021-21361	2021-11-22 11:59	2021-02-16	Show	GitHub Exploit DB Packet Storm

133729	8.8	重要 Network	SAP	SAP Manufacturing Integration and Intelligence	SAP MII におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2021-21480	2021-11-22 11:27	2021-03-9	Show	GitHub Exploit DB Packet Storm

133730	8.8	重要 Adjacent	SAP	SAP NetWeaver	SAP NetWeaver における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2021-21481	2021-11-22 11:06	2021-03-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1051	6.1	MEDIUM Network	-	-	A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could exploit the refresh parameter of the iFrame … New	CWE-79 Cross-site Scripting	CVE-2026-50740	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1052	8.8	HIGH Network	-	-	Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin ident… New	CWE-94 Code Injection	CVE-2026-50741	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1053	4.4	MEDIUM Network	-	-	A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without… New	CWE-79 Cross-site Scripting	CVE-2026-50742	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1054	4.3	MEDIUM Network	-	-	A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method … New	CWE-284 Improper Access Control	CVE-2026-50744	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1055	4.7	MEDIUM Network	-	-	A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty cus… New	CWE-79 Cross-site Scripting	CVE-2026-50745	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1056	-		-	-	FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, w… New	CWE-306 Missing Authentication for Critical Function	CVE-2026-43920	2026-06-27 01:10	2026-06-26	Show	GitHub Exploit DB Packet Storm

1057	6.5	MEDIUM Network	-	-	The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to unauthor… New	CWE-862 Missing Authorization	CVE-2026-1869	2026-06-27 00:49	2026-06-26	Show	GitHub Exploit DB Packet Storm

1058	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS. This issue affects Exclusive Addons E… New	CWE-79 Cross-site Scripting	CVE-2026-57620	2026-06-27 00:49	2026-06-26	Show	GitHub Exploit DB Packet Storm

1059	5.3	MEDIUM Network	-	-	Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions. New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2025-66123	2026-06-27 00:49	2026-06-27	Show	GitHub Exploit DB Packet Storm

1060	5.3	MEDIUM Network	-	-	Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions. New	CWE-862 Missing Authorization	CVE-2026-24547	2026-06-27 00:49	2026-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed