Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232521 9.3 危険 south river technologies - Titan FTP Server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0702 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232522 7.8 危険 print manager plus - Print Manager Plus 2008 Client Billing and Authentication におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0693 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232523 4.3 警告 simon elvery
WordPress.org		 - WordPress 用の Simon Elvery WP-Footnotes プラグイにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0691 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232524 4.3 警告 smartscript - Smartscript Domain Trader の catalog.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0688 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232525 7.5 危険 youtube - Youtube Clone Script の siteadmin/editor_files/includes/load_message.php におけるクロスサイトスクリプティングの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0687 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232526 7.5 危険 WordPress.org - WordPress 用の st_newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0683 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232527 7.5 危険 WordPress.org - WordPress 用の Wordspew プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0682 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232528 6.8 警告 phpshop - PHPShop の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0681 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232529 7.5 危険 the everything development company - The Everything Development System の The Everything Development Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0675 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
232530 7.5 危険 tintin - TinTin++ および WinTin++ におけるホームディレクトリの一番上のレベルにある任意のファイルを切り捨てられる脆弱性 CWE-DesignError
CVE-2008-0673 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
811 9.6 CRITICAL
Adjacent 		- - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… New CWE-20
 Improper Input Validation  		CVE-2026-47928 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
812 8.4 HIGH
Adjacent 		- - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privi… New CWE-863
 Incorrect Authorization 		CVE-2026-47929 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
813 8.1 HIGH
Network 		- - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage thi… New CWE-20
 Improper Input Validation  		CVE-2026-47930 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
814 8.4 HIGH
Adjacent 		- - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… New CWE-20
 Improper Input Validation  		CVE-2026-47931 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
815 8.8 HIGH
Adjacent 		- - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature… New CWE-22
Path Traversal 		CVE-2026-47932 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
816 4.8 MEDIUM
Adjacent 		- - ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vu… New CWE-79
Cross-site Scripting 		CVE-2026-47933 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
817 7.4 HIGH
Local 		- - Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the cu… New CWE-427
 Uncontrolled Search Path Element 		CVE-2026-47937 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
818 10.0 CRITICAL
Network 		- - Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this i… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-47938 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
819 7.4 HIGH
Network 		- - ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attack… New CWE-611
XXE 		CVE-2026-47960 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
820 5.5 MEDIUM
Local 		- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could re… New CWE-22
Path Traversal 		CVE-2026-34657 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm