Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233051 7.5 危険 solidweb - Novus の notas.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5123 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
233052 7.5 危険 SoftbizScripts - SoftBiz Classifieds PLUS の store_info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5122 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
233053 5 警告 roi revolution - Google Urchin の report.cgi における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-5113 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
233054 4.3 警告 roi revolution - Google Urchin の session.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5112 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
233055 4.3 警告 WordPress.org - WordPress の wp-register.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5106 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
233056 4.3 警告 WordPress.org - WordPress の wp-register.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5105 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
233057 6.8 警告 wordsmith - Wordsmith の config.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5103 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
233058 6.8 警告 wordsmith - Wordsmith の config.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5102 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
233059 6.8 警告 phpBB - phpBB Plus における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5100 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
233060 7.5 危険 sk.log - sk.log の php-inc/log.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5089 2012-12-20 18:33 2007-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1221 - - - Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… CWE-20
 Improper Input Validation 
CVE-2026-0415 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1222 - - - Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… CWE-94
Code Injection
CVE-2026-0414 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1223 7.5 HIGH
Network
- - image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-71330 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1224 7.5 HIGH
Network
- - image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-71329 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1225 7.5 HIGH
Network
- - image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-71319 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1226 6.1 MEDIUM
Network
apache answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization … CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-25699 2026-06-10 22:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1227 6.5 MEDIUM
Network
apache answer Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation durin… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-33582 2026-06-10 22:37 2026-06-9 Show GitHub Exploit DB Packet Storm
1228 6.5 MEDIUM
Network
apache answer Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, a… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-34031 2026-06-10 22:28 2026-06-9 Show GitHub Exploit DB Packet Storm
1229 6.5 MEDIUM
Network
apache answer Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did not enforce access rest… CWE-200
Information Exposure
CVE-2026-34905 2026-06-10 22:28 2026-06-9 Show GitHub Exploit DB Packet Storm
1230 6.1 MEDIUM
Network
apache answer Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. AI-generated response content was rendered in the browser without pr… CWE-87
 Improper Neutralization of Alternate XSS Syntax
CVE-2026-25688 2026-06-10 22:12 2026-06-9 Show GitHub Exploit DB Packet Storm