Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223331 4.3 警告 GPSD project
Canonical
- gpsd の NMEA0183 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-2038 2014-02-10 16:59 2013-05-1 Show GitHub Exploit DB Packet Storm
223332 4.3 警告 Novell - osc における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1095 2014-02-10 16:23 2012-04-5 Show GitHub Exploit DB Packet Storm
223333 5 警告 シーメンス - Siemens SIMATIC WinCC OA におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-1699 2014-02-10 16:00 2014-02-3 Show GitHub Exploit DB Packet Storm
223334 5 警告 シーメンス - Siemens SIMATIC WinCC OA におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-1698 2014-02-10 15:59 2014-02-3 Show GitHub Exploit DB Packet Storm
223335 7.5 危険 シーメンス - Siemens SIMATIC WinCC OA の統合 Web サーバにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2014-1697 2014-02-10 15:59 2014-02-3 Show GitHub Exploit DB Packet Storm
223336 5 警告 シーメンス - Siemens SIMATIC WinCC OA におけるアクセス権を取得される脆弱性 CWE-310
暗号の問題
CVE-2014-1696 2014-02-10 15:59 2014-02-3 Show GitHub Exploit DB Packet Storm
223337 8.5 危険 IBM - IBM Algo One における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-6332 2014-02-10 15:49 2014-02-4 Show GitHub Exploit DB Packet Storm
223338 4.9 警告 IBM - IBM WebSphere Transformation Extender の Launcher におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2962 2014-02-10 15:48 2014-02-5 Show GitHub Exploit DB Packet Storm
223339 5 警告 GNU Project
Novell
- openSUSE の build で使用される cpio における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-4226 2014-02-10 15:16 2010-11-10 Show GitHub Exploit DB Packet Storm
223340 4.3 警告 D-Link Systems, Inc. - D-Link DAP-2553 Access Point のファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7321 2014-02-10 14:50 2013-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 4.3 MEDIUM
Network
- - The WpMobi plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.3. This is due to missing or incorrect nonce validation on the handleSaveGeneralS… New CWE-352
 Origin Validation Error
CVE-2026-8909 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1082 6.4 MEDIUM
Network
- - The WP GDPR Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ninja_gdpr_ajax_actions' AJAX action in versions up to, and including, 1.0.0. This is due to miss… New CWE-79
Cross-site Scripting
CVE-2026-8977 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1083 7.5 HIGH
Network
- - The 6Storage Rentals plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.22.0 via the `userId` parameter of the `six_storage_g… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-9185 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1084 8.8 HIGH
Network
- - The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 2.3.28. This is due to the ajax_ayi_action() handler only applying str… New CWE-269
 Improper Privilege Management
CVE-2026-11616 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1085 6.5 MEDIUM
Network
- - The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to and including 7.0.10. This is due to three compounding design flaws: (1) the plugin leak… New CWE-200
Information Exposure
CVE-2026-7542 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1086 8.8 HIGH
Network
- - The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_meta' REST API field and the V200 database migration in versions up to and incl… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-8365 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1087 6.4 MEDIUM
Network
- - The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Field in all versions … New CWE-79
Cross-site Scripting
CVE-2026-8599 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1088 6.4 MEDIUM
Network
- - The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Widget HTML Tag Settings in all versions up to, and i… New CWE-79
Cross-site Scripting
CVE-2026-8677 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1089 4.3 MEDIUM
Network
- - The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi… New CWE-862
 Missing Authorization
CVE-2026-4058 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
1090 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks nee… New - CVE-2026-46324 2026-06-9 22:16 2026-06-9 Show GitHub Exploit DB Packet Storm