Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243821 5 警告 cms.tut.su - CMS Chainuk における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-2332 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243822 7.5 危険 cms.tut.su - CMS Chainuk における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2331 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243823 4.3 警告 cms.tut.su - CMS Chainuk の admin/admin_menu.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2330 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243824 5 警告 clicknet - Clicknet CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2325 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243825 4.3 警告 CKEditor Team - FCKeditor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2324 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243826 5.8 警告 Axesstel - Axesstel MV の Web インターフェースにおけるクロスサイトリクエストフォージェリの検出を回避される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-2323 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243827 4.3 警告 Axesstel - Axesstel MV の cgi-bin/sysconf.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2322 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243828 7.8 危険 Axesstel - Axesstel MV の cgi-bin/sysconf.cgi におけるサービス運用妨害 (設定リセット) 状態となる脆弱性 CWE-Other
その他
CVE-2009-2321 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243829 7.5 危険 Axesstel - Axesstel MV の Web インターフェースにおける巧妙に細工されたデータを送信される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2320 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
243830 5 警告 Axesstel - Axesstel MV の Wi-Fi コンポーネントのデフォルト設定における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2009-2319 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.1 MEDIUM
Network
- - A reflected cross-site scripting issue exists in URL handling. Update CWE-80
Basic XSS
CVE-2026-9646 2026-06-2 03:12 2026-05-29 Show GitHub Exploit DB Packet Storm
622 4.0 MEDIUM
Local
- - XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupted application data by sending u… Update CWE-1286
 Improper Validation of Syntactic Correctness of Input
CVE-2026-10099 2026-06-2 03:12 2026-05-30 Show GitHub Exploit DB Packet Storm
623 7.2 HIGH
Network
- - The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containin… Update CWE-22
Path Traversal
CVE-2026-39276 2026-06-2 03:12 2026-05-30 Show GitHub Exploit DB Packet Storm
624 5.3 MEDIUM
Network
- - Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client. New CWE-839
 Numeric Range Comparison Without Minimum Check
CVE-2026-48840 2026-06-2 03:12 2026-05-30 Show GitHub Exploit DB Packet Storm
625 5.7 MEDIUM
Network
- - An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. Th… New CWE-200
CWE-269
Information Exposure
 Improper Privilege Management
CVE-2026-48210 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
626 5.7 MEDIUM
Network
- - An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS… New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-48187 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
627 9.1 CRITICAL
Network
- - An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue o… New CWE-20
 Improper Input Validation 
CVE-2026-48188 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
628 5.7 MEDIUM
Network
- - An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled a… New CWE-200
Information Exposure
CVE-2026-48189 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
629 3.5 LOW
Network
- - An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be… New CWE-276
Incorrect Default Permissions 
CVE-2026-48190 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
630 3.5 LOW
Network
- - An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA an… New CWE-276
Incorrect Default Permissions 
CVE-2026-48191 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm