Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231311 6.2 警告 OpenOffice.org Project - OOo の senddoc における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4937 2012-12-20 18:52 2008-11-5 Show GitHub Exploit DB Packet Storm
231312 8.8 危険 visagesoft - VISAGESOFT eXPert PDF Viewer X ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認
CVE-2008-4919 2012-12-20 18:52 2008-11-4 Show GitHub Exploit DB Packet Storm
231313 4.3 警告 SonicWALL - SonicWALL Pro 2040 などで使用されている SonicWALL SonicOS Enhanced におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4918 2012-12-20 18:52 2008-11-4 Show GitHub Exploit DB Packet Storm
231314 7.5 危険 rs maxsoft - RS MAXSOFT の fotogalerie モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4912 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
231315 10 危険 サン・マイクロシステムズ - Sun Java Web Start の BasicService におけるクライアントマシン上で任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-4910 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
231316 7.5 危険 w1n78 - e107 用の Lyrics プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4906 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
231317 5 警告 typosphere - Typo におけるパスワードを推測される脆弱性 CWE-310
暗号の問題
CVE-2008-4905 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
231318 6 警告 typosphere - Typo の "ページを管理する" 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4904 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
231319 4.3 警告 typosphere - Typo のコメントを残す機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4903 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
231320 7.5 危険 scripts frenzy - Article Publisher Pro の contact_author.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4902 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2931 8.8 HIGH
Network
- - A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function strcpy of the file /goform/formTaskEdit. The manipulation results in stack-based buffer overflow. The at… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10292 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2932 8.8 HIGH
Network
- - A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes stack-based buffer ov… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10293 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2933 4.3 MEDIUM
Network
- - A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-10294 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2934 3.3 LOW
Local
- - A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py. Performing a mani… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-10295 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2935 6.3 MEDIUM
Network
- - A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Usernam… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10296 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2936 6.3 MEDIUM
Network
- - A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /manage_course.php. The manipulation of the argument ID leads to sql injection. It … CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10297 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2937 3.3 LOW
Local
- - A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null point… CWE-404
CWE-476
 Improper Resource Shutdown or Release
 NULL Pointer Dereference
CVE-2026-10298 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2938 3.8 LOW
Network
- - A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulation of the argument … CWE-99
Resource Injection
CVE-2026-10299 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2939 3.7 LOW
Network
- - A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTTP Endpoint. Such ma… CWE-617
 Reachable Assertion
CVE-2026-10300 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
2940 4.3 MEDIUM
Network
- - A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argument page results in c… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-10301 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm