Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223831 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4192 2013-10-28 15:23 2012-10-11 Show GitHub Exploit DB Packet Storm
223832 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 CWE-DesignError
CVE-2012-4193 2013-10-28 15:22 2012-10-11 Show GitHub Exploit DB Packet Storm
223833 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4188 2013-10-28 15:21 2012-10-9 Show GitHub Exploit DB Packet Storm
223834 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-4187 2013-10-28 15:20 2012-10-9 Show GitHub Exploit DB Packet Storm
223835 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4186 2013-10-28 15:18 2012-10-9 Show GitHub Exploit DB Packet Storm
223836 7.5 危険 DELL EMC (旧 EMC Corporation) - EMC RSA Authentication Agent for Web for Internet Information Services におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3280 2013-10-28 15:11 2013-10-23 Show GitHub Exploit DB Packet Storm
223837 4.3 警告 DHTMLX - WordPress 用 Spreadsheet プラグインの codebase/spreadsheet.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6281 2013-10-28 14:53 2013-10-22 Show GitHub Exploit DB Packet Storm
223838 7.5 危険 Novell
Puppet
Canonical
- Puppet および Puppet Enterprise における任意の Ruby クラスをインスタンス化される脆弱性 CWE-20
不適切な入力確認
CVE-2013-3567 2013-10-28 14:42 2013-06-18 Show GitHub Exploit DB Packet Storm
223839 4.3 警告 LinksAlpha - WordPress 用 Social Sharing Toolkit プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6280 2013-10-28 14:41 2013-10-25 Show GitHub Exploit DB Packet Storm
223840 10 危険 デル - Dell iDRAC のファームウェアの Web インタフェースにおける CLP インタフェースを変更される脆弱性 CWE-noinfo
情報不足
CVE-2013-4785 2013-10-28 14:26 2013-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
771 9.9 CRITICAL
Network
- - Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects in the team settings allowed any authenticated panel user to take over the RBAC system. Settings/Team/… CWE-269
CWE-285
 Improper Privilege Management
Improper Authorization
CVE-2026-47744 2026-05-30 05:17 2026-05-30 Show GitHub Exploit DB Packet Storm
772 6.5 MEDIUM
Network
- - Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, the admin tables for PaymentMethods, Currencies and Carriers exposed inline toggles and per-record actions (enable, disable, edit, delete… CWE-862
 Missing Authorization
CVE-2026-47745 2026-05-30 05:17 2026-05-30 Show GitHub Exploit DB Packet Storm
773 5.3 MEDIUM
Network
- - Casdoor versions 2.362.0 and earlier contain a logic flaw in the social‑login binding flow that allows users to bypass configured MFA requirements. The binding‑rule code path in controllers/auth.go c… - CVE-2026-9091 2026-05-30 05:16 2026-05-29 Show GitHub Exploit DB Packet Storm
774 9.1 CRITICAL
Network
- - Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extra… - CVE-2026-9090 2026-05-30 05:16 2026-05-29 Show GitHub Exploit DB Packet Storm
775 7.1 HIGH
Network
- - In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible CWE-79
Cross-site Scripting
CVE-2026-49371 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
776 7.5 HIGH
Network
- - In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-49372 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
777 7.1 HIGH
Network
- - In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings CWE-88
Argument Injection
CVE-2026-49373 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
778 7.6 HIGH
Network
- - In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters CWE-862
 Missing Authorization
CVE-2026-49374 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
779 6.1 MEDIUM
Network
- - In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page CWE-79
Cross-site Scripting
CVE-2026-49375 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm
780 6.5 MEDIUM
Network
- - In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin CWE-863
 Incorrect Authorization
CVE-2026-49376 2026-05-30 05:11 2026-05-30 Show GitHub Exploit DB Packet Storm