Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244101 9.3 危険 awingsoft - Awingsoft Awakening Winds3D Viewer プラグインにおける任意のファイルをダウンロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2009-2386 2012-06-26 16:10 2009-07-10 Show GitHub Exploit DB Packet Storm
244102 7.5 危険 Simple Machines
fustrate
- SMF 用 Member Awards コンポーネントの awardsMembers 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2385 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
244103 7.5 危険 blogtrafficexchange
WordPress.org
- WordPress 用の Related Sites プラグインの BTE_RW_Webajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2383 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
244104 5 警告 gizmo5 - Linux 上の Gizmo における任意のユーザの資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2009-2381 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
244105 4.3 警告 4homepages - 4images の includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2380 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
244106 6.8 警告 BIGACE - BIGACE Web CMS の public/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2379 2012-06-26 16:10 2009-07-1 Show GitHub Exploit DB Packet Storm
244107 4.3 警告 avax-software - AVAX-software Avax Vector ActiveX の Avax Vector ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2377 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
244108 7.5 危険 datachecknh - DataCheck Solutions ForumPal FE および ForumPal の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2366 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
244109 7.5 危険 datachecknh - DataCheck Solutions GalleryPal FE の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2365 2012-06-26 16:10 2009-07-8 Show GitHub Exploit DB Packet Storm
244110 9.3 危険 dan cahill - NullLogic Groupware の pgsqlQuery 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2356 2012-06-26 16:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1191 7.1 HIGH
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.Com e2pdf allows Reflected XSS. This issue affects e2pdf: from n/a through 1.32.14. New CWE-79
Cross-site Scripting
CVE-2026-42681 2026-06-2 01:41 2026-06-2 Show GitHub Exploit DB Packet Storm
1192 9.1 CRITICAL
Network
- - Missing Authorization vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects wpForo Forum: from n/a through 3.0.6. New CWE-862
 Missing Authorization
CVE-2026-42682 2026-06-2 01:41 2026-06-2 Show GitHub Exploit DB Packet Storm
1193 7.1 HIGH
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows DOM-Based XSS. This issue affects VikBooki… New CWE-79
Cross-site Scripting
CVE-2026-42683 2026-06-2 01:41 2026-06-2 Show GitHub Exploit DB Packet Storm
1194 7.1 HIGH
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics allows DOM-Based XSS. This issue affects WP Statistics: from n/a throug… New CWE-79
Cross-site Scripting
CVE-2026-48839 2026-06-2 01:41 2026-06-2 Show GitHub Exploit DB Packet Storm
1195 7.1 HIGH
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress allows Reflected XSS. This issue affects LearnPress: from n/a through 4.3.6. New CWE-79
Cross-site Scripting
CVE-2026-48865 2026-06-2 01:41 2026-06-2 Show GitHub Exploit DB Packet Storm
1196 9.6 CRITICAL
Network
- - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal. This issue affects Gravity Forms: from n/a thro… New CWE-22
Path Traversal
CVE-2026-48866 2026-06-2 01:41 2026-06-2 Show GitHub Exploit DB Packet Storm
1197 9.8 CRITICAL
Network
- - Incorrect Privilege Assignment vulnerability in Sergey AIWU allows Privilege Escalation. This issue affects AIWU: from n/a through 1.4.17. New CWE-266
 Incorrect Privilege Assignment
CVE-2026-48879 2026-06-2 01:41 2026-06-2 Show GitHub Exploit DB Packet Storm
1198 - - - Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and srl_read_hash() process a COPY tag, a back-refere… New CWE-125
Out-of-bounds Read
CVE-2026-8796 2026-06-2 01:37 2026-06-1 Show GitHub Exploit DB Packet Storm
1199 - - - SOPlanning does not enforce authorization for backup functionalities. An unauthenticated attacker can directly query backup-related endpoints and retrieve backup archives containing user databases wi… New CWE-862
 Missing Authorization
CVE-2026-40543 2026-06-2 01:37 2026-06-1 Show GitHub Exploit DB Packet Storm
1200 - - - SOPlanning is vulnerable to Stored Cross-Site Scripting (XSS) via /process/upload_backup endpoint. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive c… New CWE-79
Cross-site Scripting
CVE-2026-40544 2026-06-2 01:37 2026-06-1 Show GitHub Exploit DB Packet Storm