Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223721 4 警告 MySQL AB
オラクル		 - Oracle MySQL における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2392 2013-11-8 16:25 2013-04-16 Show GitHub Exploit DB Packet Storm
223722 3 注意 MySQL AB
オラクル		 - Oracle MySQL における Server Install の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2391 2013-11-8 16:24 2013-04-16 Show GitHub Exploit DB Packet Storm
223723 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Console の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2390 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223724 4 警告 MySQL AB
オラクル		 - Oracle MySQL における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2389 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223725 5 警告 オラクル - Oracle E-Business Suite の Oracle Applications Technology Stack における Mid Tier File Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2388 2013-11-8 16:20 2013-04-16 Show GitHub Exploit DB Packet Storm
223726 3.6 注意 オラクル - Oracle Financial Services Software における BASE の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2387 2013-11-8 16:20 2013-04-16 Show GitHub Exploit DB Packet Storm
223727 4.9 警告 オラクル - Oracle Financial Services Software における BASE の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2386 2013-11-8 16:19 2013-04-16 Show GitHub Exploit DB Packet Storm
223728 4 警告 オラクル - Oracle Financial Services Software における BASE の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2385 2013-11-8 16:18 2013-04-16 Show GitHub Exploit DB Packet Storm
223729 1.7 注意 オラクル - Oracle Financial Services Software における BASE の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2382 2013-11-8 16:17 2013-04-16 Show GitHub Exploit DB Packet Storm
223730 3.5 注意 オラクル - Oracle MySQL における Server Privileges の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2381 2013-11-8 16:16 2013-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
661 6.3 MEDIUM
Network 		- - A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64_decode of the file /plus/download.php?open=1. This manipulation of the argument Link causes server-side … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-10581 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
662 4.7 MEDIUM
Network 		- - A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. Affected by this issue is the function Import of the file internal/http/tts_config.go of the component TTS Configur… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-10583 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
663 9.8 CRITICAL
Network 		- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plug… New CWE-269
 Improper Privilege Management 		CVE-2026-8206 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
664 5.5 MEDIUM
Network 		- - The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole_link’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization an… New CWE-79
Cross-site Scripting 		CVE-2025-5085 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
665 6.1 MEDIUM
Network 		- - The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mode' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitization and output esc… New CWE-79
Cross-site Scripting 		CVE-2026-1450 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
666 6.1 MEDIUM
Network 		- - The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'a' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escapi… New CWE-79
Cross-site Scripting 		CVE-2026-1451 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
667 6.4 MEDIUM
Network 		- - The FPW Category Thumbnails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'fpw_fs_get_file' AJAX action in all versions up to, and including, 1.9.5. … New CWE-79
Cross-site Scripting 		CVE-2026-2382 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
668 6.1 MEDIUM
Network 		- - The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions up to, and including, 2.0.0.1 due to insufficient input … New CWE-79
Cross-site Scripting 		CVE-2026-2425 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
669 2.4 LOW
Network 		- - A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The mani… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-10514 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
670 2.4 LOW
Network 		- - A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unknown function of the file src/main/java/com/zhiliao/module/web/system/ScheduleJo… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-10529 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm