Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1871	8	重要 Adjacent	IBM	IBM HTTP Server	IBMのIBM HTTP Serverにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-8834	2026-05-28 14:35	2026-05-26	Show	GitHub Exploit DB Packet Storm

1872	7.3	重要 Adjacent	IBM	IBM HTTP Server	IBMのIBM HTTP Serverにおける信頼できないポインタデリファレンスに関する脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-8835	2026-05-28 14:35	2026-05-26	Show	GitHub Exploit DB Packet Storm

1873	7.5	重要 Network	IBM	IBM HTTP Server	IBMのIBM HTTP ServerにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-8850	2026-05-28 14:35	2026-05-26	Show	GitHub Exploit DB Packet Storm

1874	7.5	重要 Network	IBM	IBM HTTP Server	IBMのIBM HTTP Serverにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-8852	2026-05-28 14:35	2026-05-26	Show	GitHub Exploit DB Packet Storm

1875	7.5	重要 Network	IBM	IBM HTTP Server	IBMのIBM HTTP Serverにおける期限切れのポインタデリファレンスに関する脆弱性	CWE-825 期限切れのポインタデリファレンス	CVE-2026-8854	2026-05-28 14:35	2026-05-26	Show	GitHub Exploit DB Packet Storm

1876	9.8	緊急 Network	IBM	IBM HTTP Server	IBMのIBM HTTP Serverにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-8855	2026-05-28 14:35	2026-05-26	Show	GitHub Exploit DB Packet Storm

1877	9.1	緊急 Network	IBM	IBM HTTP Server	IBMのIBM HTTP Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-8856	2026-05-28 14:35	2026-05-26	Show	GitHub Exploit DB Packet Storm

1878	8.8	重要 Network	Ivanti	secure access client	Ivantiのsecure access clientにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-8992	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

1879	7.6	重要 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおける根本の脆弱性による認証回避の脆弱性	CWE-305 根本の脆弱性による認証回避	CVE-2026-9047	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

1880	9.8	緊急 Network	Drupal	Drupal	DrupalにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-9082	2026-05-28 14:35	2026-05-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319431	8.8	HIGH Network	mayurik	best_house_rental_management_system	A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function delete_user/save_user of the file /admin_class.php. The manip…	CWE-89 SQL Injection	CVE-2024-8709	2024-09-14 01:27	2024-09-12	Show	GitHub Exploit DB Packet Storm

319432	6.1	MEDIUM Network	payara	payara	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Interface modules) allows Session Hijacking.This issue affects Payara Server: from …	CWE-601 Open Redirect	CVE-2024-7312	2024-09-14 01:27	2024-09-12	Show	GitHub Exploit DB Packet Storm

319433	8.8	HIGH Network	code-projects	inventory_management	A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerability is an unknown functionality of the file /model/viewProduct.php of the compon…	CWE-89 SQL Injection	CVE-2024-8710	2024-09-14 01:25	2024-09-12	Show	GitHub Exploit DB Packet Storm

319434	7.5	HIGH Network	oretnom23	food_ordering_management_system	A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/…	NVD-CWE-Other	CVE-2024-8711	2024-09-14 01:18	2024-09-12	Show	GitHub Exploit DB Packet Storm

319435	6.1	MEDIUM Network	scriptonite	music_request_manager	The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin ad…	CWE-352 Origin Validation Error	CVE-2024-6017	2024-09-14 01:17	2024-09-12	Show	GitHub Exploit DB Packet Storm

319436	6.1	MEDIUM Network	scriptonite	music_request_manager	The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Script…	CWE-79 Cross-site Scripting	CVE-2024-6018	2024-09-14 01:15	2024-09-12	Show	GitHub Exploit DB Packet Storm

319437	6.1	MEDIUM Network	scriptonite	music_request_manager	The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform Cross-Site Scripting attacks against ad…	CWE-79 Cross-site Scripting	CVE-2024-6019	2024-09-14 01:13	2024-09-12	Show	GitHub Exploit DB Packet Storm

319438	4.8	MEDIUM Network	pega	infinity	Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.	CWE-79 Cross-site Scripting	CVE-2024-6700	2024-09-14 01:09	2024-09-13	Show	GitHub Exploit DB Packet Storm

319439	4.8	MEDIUM Network	pega	infinity	Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.	CWE-79 Cross-site Scripting	CVE-2024-6701	2024-09-14 01:08	2024-09-13	Show	GitHub Exploit DB Packet Storm

319440	4.8	MEDIUM Network	pega	infinity	Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.	CWE-79 Cross-site Scripting	CVE-2024-6702	2024-09-14 01:07	2024-09-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed