Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242781 7.5 危険 joshua muheim - Joshua Muheim phpMyWebmin における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5124 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242782 4.9 警告 ヒューレット・パッカード - Mercury SiteScope におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5122 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242783 5.1 警告 KGB - KGB の kgcall.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5115 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242784 7.5 危険 intervations - InterVations NaviCOPA Web Server におけるバッファオーバーフローの脆弱性 - CVE-2006-5112 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242785 5 警告 Libksba project - SUSE LINUX 上の newpg パッケージの gpgsm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5111 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242786 6.8 警告 php invoice - PHP Invoice の home.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5110 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242787 7.5 危険 vBulletin Solutions, Inc. - Jelsoft vBulletin の global.php における SQL インジェクションの脆弱性 - CVE-2006-5104 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242788 7.5 危険 Netwin Ltd - WEB//NEWS の parse/parser.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5100 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
242789 7.5 危険 paul schudar - TagIt! Tagboard の Tagmin Control Center における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5093 2012-09-25 15:36 2006-09-29 Show GitHub Exploit DB Packet Storm
242790 6.8 警告 phoenix evolution - PECMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5090 2012-09-25 15:36 2006-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 5.3 MEDIUM
Network
- - Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, DetailedTagSerializer#ta… New CWE-200
Information Exposure
CVE-2026-47264 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
172 4.3 MEDIUM
Network
- - Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, the MessageBus.publish c… New CWE-200
Information Exposure
CVE-2026-47263 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
173 6.8 MEDIUM
Network
- - Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, a path traversal vulnera… New CWE-22
Path Traversal
CVE-2026-45775 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
174 5.3 MEDIUM
Network
- - Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, four authorization/discl… New CWE-200
CWE-862
Information Exposure
 Missing Authorization
CVE-2026-45085 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
175 - - - ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 are vulnerable to stored cross-site scripting via unsanitized user display name in draft version… New CWE-79
Cross-site Scripting
CVE-2026-45014 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
176 7.6 HIGH
Network
- - ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 contain an authenticated server-side request forgery (SSRF) in the rich-text widget import flow.… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45012 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
177 7.3 HIGH
Network
- - ApostropheCMS is an open-source Node.js content management system. Version 4.29.0 has a stored cross-site scripting vulnerability in the image widget functionality. A user with the Editor role can co… New CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output
CVE-2026-45011 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
178 9.3 CRITICAL
Network
- - ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` pr… New CWE-79
Cross-site Scripting
CVE-2026-44990 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
179 7.5 HIGH
Network
- - Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, chat events for public c… New CWE-200
Information Exposure
CVE-2026-44786 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm
180 4.3 MEDIUM
Network
- - Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, the AI "explain" helper … New CWE-200
Information Exposure
CVE-2026-44785 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm