Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232721 7.5 危険 realtywebware - Realty Webware Technologies Realty Web-Base の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1658 2012-12-20 19:10 2009-05-18 Show GitHub Exploit DB Packet Storm
232722 10 危険 Xerox - Xerox WorkCentre における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2009-1656 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
232723 7.8 危険 tinybutstrong - TinyButStrong の examples/tbs_us_examples_0view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-1653 2012-12-20 19:10 2009-05-16 Show GitHub Exploit DB Packet Storm
232724 7.5 危険 tenfourzero - Shutter の photos.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1650 2012-12-20 19:10 2009-05-16 Show GitHub Exploit DB Packet Storm
232725 7.5 危険 SUSE - SUSE Linux 上で稼動する yast2-ldap-server の YaST2 LDAP モジュールにおけるネットワークサービスをアクセスされる脆弱性 CWE-16
環境設定
CVE-2009-1648 2012-12-20 19:10 2009-07-3 Show GitHub Exploit DB Packet Storm
232726 9.3 危険 ultrafunk - Ultrafunk Popcorn の popcorn.exe におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1647 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
232727 9.3 危険 sorinara - Sorinara Streaming Audio Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1644 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
232728 9.3 危険 sorinara - Sorinara Soritong MP3 Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1643 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
232729 7.5 危険 t-dreams - Techno Dreams Job Career Package における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2009-1638 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
232730 6.4 警告 simplecustomer - Simple Customer の profile.php における admin 電子メールアドレスなどを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1637 2012-12-20 19:10 2009-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2941 6.5 MEDIUM
Network
erlang erlang\/otp
erlang\/ssh
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery. The SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of… CWE-200
Information Exposure
CVE-2026-48855 2026-06-16 03:23 2026-06-11 Show GitHub Exploit DB Packet Storm
2942 5.5 MEDIUM
Local
erlang erl_interface
erlang\/otp
Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm… CWE-121
Stack-based Buffer Overflow
CVE-2026-49760 2026-06-16 03:23 2026-06-11 Show GitHub Exploit DB Packet Storm
2943 7.8 HIGH
Local
microsoft pc_manager Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. CWE-59
Link Following
CVE-2026-50511 2026-06-16 03:23 2026-06-10 Show GitHub Exploit DB Packet Storm
2944 7.8 HIGH
Local
microsoft pc_manager Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. CWE-306
Missing Authentication for Critical Function
CVE-2026-50512 2026-06-16 03:22 2026-06-10 Show GitHub Exploit DB Packet Storm
2945 9.8 CRITICAL
Network
- - The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditional… - CVE-2026-8935 2026-06-16 03:16 2026-06-15 Show GitHub Exploit DB Packet Storm
2946 5.3 MEDIUM
Network
- - The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that… - CVE-2026-8386 2026-06-16 03:16 2026-06-15 Show GitHub Exploit DB Packet Storm
2947 - - - LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The import… CWE-787
CWE-843
 Out-of-bounds Write
Type Confusion
CVE-2026-8358 2026-06-16 03:16 2026-06-16 Show GitHub Exploit DB Packet Storm
2948 - - - LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting dep… CWE-193
CWE-787
 Off-by-one Error
 Out-of-bounds Write
CVE-2026-8357 2026-06-16 03:16 2026-06-16 Show GitHub Exploit DB Packet Storm
2949 - - - LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the fil… CWE-121
CWE-787
Stack-based Buffer Overflow
 Out-of-bounds Write
CVE-2026-8356 2026-06-16 03:16 2026-06-16 Show GitHub Exploit DB Packet Storm
2950 - - - LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one typ… CWE-787
CWE-843
 Out-of-bounds Write
Type Confusion
CVE-2026-6047 2026-06-16 03:16 2026-06-16 Show GitHub Exploit DB Packet Storm