Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232611 4.3 警告 uapplication - Uapplication Uphotogallery の images_archive.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0815 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
232612 7.5 危険 woltlab - wBB Lite の pms.php における SQL インジェクションの脆弱性 - CVE-2007-0812 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
232613 7.5 危険 ptirhiikmods - ptirhiikmods の Categories hierarchy における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0809 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
232614 6.8 警告 stlport - STLport におけるバッファオーバーフローの脆弱性 - CVE-2007-0803 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
232615 7.5 危険 uapplication - Ublog Reload の badword.asp における SQL インジェクションの脆弱性 - CVE-2007-0799 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
232616 4.3 警告 uapplication - Ublog Reload におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0798 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
232617 7.5 危険 wap - Wap Portal Server における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0795 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
232618 7.5 危険 SmartSoft - SmartFTP におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0790 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
232619 6.8 警告 Simple Invoices - Simple Invoices の controller.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0787 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
232620 7.5 危険 rbl - Raymond BERTHOU script collection の tPassword 用の login.asp における SQL インジェクションの脆弱性 - CVE-2007-0784 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
661 6.3 MEDIUM
Network 		- - A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64_decode of the file /plus/download.php?open=1. This manipulation of the argument Link causes server-side … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-10581 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
662 4.7 MEDIUM
Network 		- - A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. Affected by this issue is the function Import of the file internal/http/tts_config.go of the component TTS Configur… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-10583 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
663 9.8 CRITICAL
Network 		- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plug… New CWE-269
 Improper Privilege Management 		CVE-2026-8206 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
664 5.5 MEDIUM
Network 		- - The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole_link’ parameter in all versions up to, and including, 1.31 due to insufficient input sanitization an… New CWE-79
Cross-site Scripting 		CVE-2025-5085 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
665 6.1 MEDIUM
Network 		- - The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mode' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitization and output esc… New CWE-79
Cross-site Scripting 		CVE-2026-1450 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
666 6.1 MEDIUM
Network 		- - The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'a' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escapi… New CWE-79
Cross-site Scripting 		CVE-2026-1451 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
667 6.4 MEDIUM
Network 		- - The FPW Category Thumbnails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'fpw_fs_get_file' AJAX action in all versions up to, and including, 1.9.5. … New CWE-79
Cross-site Scripting 		CVE-2026-2382 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
668 6.1 MEDIUM
Network 		- - The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions up to, and including, 2.0.0.1 due to insufficient input … New CWE-79
Cross-site Scripting 		CVE-2026-2425 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
669 2.4 LOW
Network 		- - A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The mani… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-10514 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
670 2.4 LOW
Network 		- - A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unknown function of the file src/main/java/com/zhiliao/module/web/system/ScheduleJo… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-10529 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm