Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
244481 7.5 危険 bosdev - BosDev BosClassifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6526 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
244482 6.5 警告 cale dunlap - openInvoice の resetpass.php における任意のユーザパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-6524 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
244483 7.5 危険 cale dunlap - openInvoice の auth.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6523 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
244484 6.8 警告 devraj mukherjee - Terracotta の ContentRender.class.php の RenderFile 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6522 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
244485 7.8 危険 devraj mukherjee - Terracotta の index.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6521 2012-06-26 16:10 2009-03-25 Show GitHub Exploit DB Packet Storm
244486 6.2 警告 compiz - Compiz Fusion の Expo プラグインにおけるロックされたデスクトップへアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6514 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
244487 6.8 警告 Andy's PHP Knowledgebase Project - Andy's PHP Knowledgebase の saa.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6513 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
244488 6.8 警告 Google - Google Gears の WorkerPool API における同一送信元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2008-6512 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
244489 4.3 警告 codetoad - CodeToad ASP Shopping Cart Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6500 2012-06-26 16:10 2009-03-20 Show GitHub Exploit DB Packet Storm
244490 5.5 警告 Apache Friends - XAMPP の security/xamppsecurity.php における重要な変数を偽装される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6499 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1311 6.5 MEDIUM
Network 		- - Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint, whi… CWE-22
Path Traversal 		CVE-2026-47118 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1312 - - - Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when API_TOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authenticat… CWE-306
Missing Authentication for Critical Function 		CVE-2026-44830 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1313 9.8 CRITICAL
Network 		- - FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally calls invocation.invo… CWE-306
Missing Authentication for Critical Function 		CVE-2026-44668 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1314 9.1 CRITICAL
Network 		- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static backend safety sca… CWE-78
OS Command  		CVE-2026-44444 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1315 - - - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/actions_addupdatedelete.inc.php - CVE-2026-37711 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1316 - - - Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate). - CVE-2026-31266 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1317 - - - A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0. - CVE-2026-30498 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1318 2.7 LOW
Network 		gtranslate gtranslate Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.… CWE-471
 Modification of Assumed-Immutable Data (MAID) 		CVE-2026-8492 2026-05-28 00:15 2026-05-20 Show GitHub Exploit DB Packet Storm
1319 9.8 CRITICAL
Network 		date_ical_project date_ical Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15. CWE-862
 Missing Authorization 		CVE-2026-8495 2026-05-28 00:14 2026-05-20 Show GitHub Exploit DB Packet Storm
1320 5.4 MEDIUM
Network 		colorbox_inline_project colorbox_inline Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: fr… CWE-79
Cross-site Scripting 		CVE-2026-8493 2026-05-28 00:08 2026-05-20 Show GitHub Exploit DB Packet Storm