Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224871 10 危険 Apache Software Foundation - Apache Open For Business Project における任意の Unified Expression Language 機能を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2250 2013-08-16 11:45 2013-07-20 Show GitHub Exploit DB Packet Storm
224872 4.3 警告 Apache Software Foundation - Apache Open For Business Project の Webtools アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2137 2013-08-16 11:37 2013-07-20 Show GitHub Exploit DB Packet Storm
224873 7.5 危険 BigTree CMS - BigTree CMS の core/inc/bigtree/cms.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4879 2013-08-15 19:02 2013-07-3 Show GitHub Exploit DB Packet Storm
224874 4.3 警告 BigTree CMS - BigTree CMS の core/admin/modules/developer/modules/views/add.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4880 2013-08-15 19:00 2013-07-17 Show GitHub Exploit DB Packet Storm
224875 7.5 危険 Moxi9 - PHPFox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5121 2013-08-15 18:39 2013-08-7 Show GitHub Exploit DB Packet Storm
224876 7.5 危険 Moxi9 - PHPFox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5120 2013-08-15 18:33 2013-07-30 Show GitHub Exploit DB Packet Storm
224877 7.5 危険 LibRaw - LibRaw の exposure correction コードにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2127 2013-08-15 18:04 2013-05-24 Show GitHub Exploit DB Packet Storm
224878 7.5 危険 Novell
Canonical
LibRaw
- LibRaw の libraw_cxx.cpp 内の LibRaw::unpack 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2013-2126 2013-08-15 18:01 2013-05-26 Show GitHub Exploit DB Packet Storm
224879 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-3199 2013-08-15 15:54 2013-08-13 Show GitHub Exploit DB Packet Storm
224880 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-3194 2013-08-15 15:51 2013-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2031 7.5 HIGH
Network
- - Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout: from n/a throug… CWE-862
 Missing Authorization
CVE-2026-45209 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2032 8.8 HIGH
Network
- - Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation. This issue affects Smart Manager: from n/a through 8.85.0. CWE-266
 Incorrect Privilege Assignment
CVE-2026-45216 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2033 6.5 MEDIUM
Network
- - Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Ga… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-45217 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2034 6.5 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a thr… CWE-79
Cross-site Scripting
CVE-2026-45435 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2035 7.5 HIGH
Network
- - Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Coupons for WooCommer… CWE-862
 Missing Authorization
CVE-2026-45438 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2036 8.5 HIGH
Network
- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elemen… CWE-89
SQL Injection
CVE-2026-48837 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
2037 6.3 MEDIUM
Network
- - A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGST_Invoice.php of the component Invoice Generation Handler… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9411 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm
2038 6.3 MEDIUM
Network
- - A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead to improper access c… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-9412 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm
2039 4.3 MEDIUM
Network
- - A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of the argument msg lea… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9413 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm
2040 3.5 LOW
Network
- - A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice … CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9414 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm