Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230361 4.3 警告 Mads Peter Henderson - Drupal 用 Ubercart Views モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0321 2013-04-1 14:37 2013-02-20 Show GitHub Exploit DB Packet Storm
230362 5.1 警告 mattias hutterer - Drupal 用 Taxonomy Manager モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0320 2013-04-1 14:37 2013-02-20 Show GitHub Exploit DB Packet Storm
230363 4.3 警告 Yandex.Metrics Pproject - Drupal 用 Yandex.Metrics モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0319 2013-04-1 14:36 2013-02-19 Show GitHub Exploit DB Packet Storm
230364 10 危険 Banckle Chat Project - Drupal 用 Banckle Chat モジュールにおける制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0318 2013-04-1 14:17 2013-02-13 Show GitHub Exploit DB Packet Storm
230365 4.3 警告 Joe Haskins - Drupal 用 Manager Change for Organic Groups モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0317 2013-04-1 14:16 2013-02-12 Show GitHub Exploit DB Packet Storm
230366 5 警告 Drupal - Drupal の Image モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-0316 2013-04-1 14:15 2013-02-20 Show GitHub Exploit DB Packet Storm
230367 2.1 注意 Elliot Pahl - Drupal 用 Drush Debian Packaging モジュールにおけるデータベースの認証情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-0260 2013-04-1 14:13 2013-01-30 Show GitHub Exploit DB Packet Storm
230368 2.1 注意 Boxes project - Drupal 用 Boxes モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0259 2013-04-1 14:11 2013-01-23 Show GitHub Exploit DB Packet Storm
230369 6.8 警告 Attiks - Drupal 用 Google Authenticator login モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-0258 2013-04-1 14:08 2013-01-29 Show GitHub Exploit DB Packet Storm
230370 5 警告 David Alkire - Drupal 用 email2image モジュールにおけるユーザの電子メール情報のイメージ画像を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0257 2013-04-1 14:06 2013-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
651 6.9 MEDIUM
Network
- - A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker with cluster administrator privileges can i… New CWE-79
Cross-site Scripting
CVE-2026-13083 2026-06-27 13:17 2026-06-26 Show GitHub Exploit DB Packet Storm
652 - - - Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local. Attackers can exploit path traversal in the… New CWE-73
 External Control of File Name or Path
CVE-2025-71333 2026-06-27 13:17 2026-06-26 Show GitHub Exploit DB Packet Storm
653 - - - AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Mali… New CWE-405
CWE-770
 Asymmetric Resource Consumption (Amplification)
 Allocation of Resources Without Limits or Throttling
CVE-2025-32394 2026-06-27 13:17 2026-06-27 Show GitHub Exploit DB Packet Storm
654 5.4 MEDIUM
Network
getgrav grav Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged users with page editing capabilities can inject malicious s… New CWE-79
Cross-site Scripting
CVE-2020-37256 2026-06-27 13:17 2026-06-26 Show GitHub Exploit DB Packet Storm
655 - - - A command injection vulnerability has been identified in the DHCP option processing logic in multiple TP-Link router models, due to insufficient validation of externally supplied DHCP option data. An… New CWE-78
OS Command 
CVE-2026-11834 2026-06-27 07:16 2026-06-23 Show GitHub Exploit DB Packet Storm
656 7.5 HIGH
Network
imagemagick imagemagick ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by proces… New CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2026-56368 2026-06-27 06:51 2026-06-24 Show GitHub Exploit DB Packet Storm
657 7.8 HIGH
Local
imagemagick imagemagick ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Attackers can trigger acc… New CWE-125
Out-of-bounds Read
CVE-2026-56370 2026-06-27 06:50 2026-06-24 Show GitHub Exploit DB Packet Storm
658 7.5 HIGH
Network
angularjs angularjs Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, a Denial of Service (DoS) vu… New CWE-400
CWE-1333
 Uncontrolled Resource Consumption
 Inefficient Regular Expression Complexity
CVE-2026-54268 2026-06-27 06:36 2026-06-23 Show GitHub Exploit DB Packet Storm
659 9.8 CRITICAL
Network
langflow langflow IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Stream… New CWE-287
NVD-CWE-noinfo
Improper Authentication
CVE-2026-7664 2026-06-27 06:29 2026-06-23 Show GitHub Exploit DB Packet Storm
660 6.1 MEDIUM
Network
ibm datacap
datacap_navigator
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary J… New CWE-79
Cross-site Scripting
CVE-2026-8059 2026-06-27 06:27 2026-06-23 Show GitHub Exploit DB Packet Storm