Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225841 4.3 警告 Wesley Destailleur - Todoo Forum の todooforum.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3538 2013-05-15 17:47 2013-05-13 Show GitHub Exploit DB Packet Storm
225842 7.5 危険 Wesley Destailleur - Todoo Forum の todooforum.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3537 2013-05-15 17:46 2013-05-13 Show GitHub Exploit DB Packet Storm
225843 7.5 危険 WHMCS Limited - WHMCS 用 Group Pay モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3536 2013-05-15 17:38 2013-05-13 Show GitHub Exploit DB Packet Storm
225844 4.3 警告 ThemeLogik - CMSLogik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3535 2013-05-15 17:35 2013-05-13 Show GitHub Exploit DB Packet Storm
225845 4.3 警告 algisinfo - Joomla! 用の aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3534 2013-05-15 17:32 2013-04-16 Show GitHub Exploit DB Packet Storm
225846 2.6 注意 Fedora Project - 389 Directory Server の ldap/servers/slapd/search.c における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1897 2013-05-15 16:07 2013-03-28 Show GitHub Exploit DB Packet Storm
225847 7.5 危険 Virtual Access - Virtual Access Monitor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3533 2013-05-14 15:49 2013-05-10 Show GitHub Exploit DB Packet Storm
225848 7.5 危険 Web-Dorado - Drupal 用 Web Dorado Spider Video Player プラグインの settings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3532 2013-05-14 15:49 2013-05-10 Show GitHub Exploit DB Packet Storm
225849 7.5 危険 RadioCMS - RadioCMS の meneger.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3531 2013-05-14 15:48 2013-05-10 Show GitHub Exploit DB Packet Storm
225850 7.5 危険 Fabricio Zuardi - WordPress 用 Spiffy XSPF Player プラグインの playlist.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3530 2013-05-14 15:47 2013-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2821 4.3 MEDIUM
Network 		- - The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the _updateSettin… CWE-352
 Origin Validation Error 		CVE-2026-8425 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2822 5.8 MEDIUM
Network 		- - Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. CWE-200
Information Exposure 		CVE-2026-41960 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2823 5.9 MEDIUM
Local 		- - Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840
 Business Logic Errors 		CVE-2026-41961 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2824 3.6 LOW
Local 		- - Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2026-41962 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2825 2.8 LOW
Local 		- - Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability. CWE-121
Stack-based Buffer Overflow 		CVE-2026-41963 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2826 8.4 HIGH
Local 		- - Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability. CWE-362
Race Condition 		CVE-2026-41964 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2827 5.6 MEDIUM
Network 		- - Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840
 Business Logic Errors 		CVE-2026-41965 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2828 5.6 MEDIUM
Network 		- - Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-840
 Business Logic Errors 		CVE-2026-41966 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2829 5.9 MEDIUM
Local 		- - Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840
 Business Logic Errors 		CVE-2026-41967 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2830 5.9 MEDIUM
Local 		- - Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840
 Business Logic Errors 		CVE-2026-41968 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm