Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244371 7.5 危険 Bharat Mediratta - Gallery における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-4343 2012-08-20 12:17 2012-06-12 Show GitHub Exploit DB Packet Storm
244372 4.3 警告 Bharat Mediratta - Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4342 2012-08-20 12:16 2012-06-12 Show GitHub Exploit DB Packet Storm
244373 10 危険 SAP - SAP NetWeaver ABAP の msg_server.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4341 2012-08-20 12:15 2012-08-15 Show GitHub Exploit DB Packet Storm
244374 4.3 警告 Qualiteam Software Limited - X-Cart Gold の products_map.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2570 2012-08-20 12:01 2012-08-15 Show GitHub Exploit DB Packet Storm
244375 6.8 警告 Kyle Browning - Drupal 用 CDN2 Video モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2155 2012-08-17 15:56 2012-03-28 Show GitHub Exploit DB Packet Storm
244376 4.3 警告 Kyle Browning - Drupal 用 CDN2 Video モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2154 2012-08-17 15:55 2012-03-28 Show GitHub Exploit DB Packet Storm
244377 2.1 注意 Angry Donuts - Drupal 用 Chaos tool suite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2082 2012-08-17 15:54 2012-03-28 Show GitHub Exploit DB Packet Storm
244378 5 警告 Moshe Weitzman - Drupal 用 Organic Groups モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2081 2012-08-17 15:53 2012-03-28 Show GitHub Exploit DB Packet Storm
244379 6.8 警告 Node Limit Number - Drupal 用 Node Limit Number モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2080 2012-08-17 15:49 2012-03-28 Show GitHub Exploit DB Packet Storm
244380 5.1 警告 Rob Loach - Drupal 用 ShareThis モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2077 2012-08-17 15:46 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2351 5.4 MEDIUM
Network
- - A security vulnerability has been detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected by this vulnerability is an unknown functionality of the file… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-11533 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2352 3.5 LOW
Network
- - A vulnerability was detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected by this issue is some unknown functionality of the file /add.php. The manip… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-11534 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2353 5.3 MEDIUM
Network
- - A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unk… CWE-255
CWE-259
Credentials Management
Use of Hard-coded Password 
CVE-2026-11552 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm
2354 8.8 HIGH
Network
- - A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in st… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-11553 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm
2355 4.3 MEDIUM
Network
- - A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. This vulnerability affects unknown code of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes least privilege vi… CWE-266
CWE-272
 Incorrect Privilege Assignment
 Least Privilege Violation
CVE-2026-11554 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm
2356 8.8 HIGH
Network
- - A security flaw has been discovered in Tenda F451 1.0.0.7/1.0.0.9. Impacted is the function formWriteFacMac of the file /goform/WriteFacMac of the component Web Management Interface. Performing a man… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-11556 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm
2357 8.8 HIGH
Network
- - A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. The affected element is the function fromNatlimit of the file /goform/Natlimit of the component Web Management Interface. Executing a man… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-11557 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm
2358 6.3 MEDIUM
Network
- - A security vulnerability has been detected in CodeAstro Payroll System 1.0. The impacted element is an unknown function of the file /home_salary.php. The manipulation of the argument rate/salary_rate… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-11558 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm
2359 6.3 MEDIUM
Network
- - A vulnerability was detected in CodeAstro Payroll System 1.0. This affects an unknown function of the file /view_account.php. The manipulation of the argument ID results in sql injection. The attack … CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-11559 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm
2360 7.3 HIGH
Network
- - A flaw has been found in CodeAstro Student Attendance Management System 1.0. The impacted element is an unknown function of the file /attendance-php/index.php. Executing a manipulation of the argumen… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-11582 2026-06-9 10:32 2026-06-9 Show GitHub Exploit DB Packet Storm