Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245881 4.9 警告 BitDefender - BitDefender Antivirus におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-1735 2012-06-26 16:02 2008-04-29 Show GitHub Exploit DB Packet Storm
245882 3.6 注意 Gentoo Linux - Gentoo Linux の PHP Toolkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-1734 2012-06-26 16:02 2008-04-17 Show GitHub Exploit DB Packet Storm
245883 5 警告 arwscripts - ARWScripts Gallery Script Lite の download.html におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1730 2012-06-26 16:02 2008-04-11 Show GitHub Exploit DB Packet Storm
245884 6.8 警告 AuraCMS - AuraCMS の content/user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1715 2012-06-26 16:02 2008-04-9 Show GitHub Exploit DB Packet Storm
245885 6.8 警告 fascript - FaScript FaPhoto の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1714 2012-06-26 16:02 2008-04-9 Show GitHub Exploit DB Packet Storm
245886 4.3 警告 e107.org - e107 用 my_gallery プラグインの dload.php における絶対パストラバーサルの脆弱性 CWE-20
CWE-22
CVE-2008-1702 2012-06-26 16:02 2008-04-8 Show GitHub Exploit DB Packet Storm
245887 7.5 危険 desiquintans - Desi Quintans Writer's Block CMS の permalink.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1699 2012-06-26 16:02 2008-04-8 Show GitHub Exploit DB Packet Storm
245888 3.7 注意 dazphp - DaZPHPNews の makepost.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1696 2012-06-26 16:02 2008-04-8 Show GitHub Exploit DB Packet Storm
245889 4.6 警告 GNU Project - Emacs の vcdiff における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-1694 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
245890 6.9 警告 eterm - Eterm における X11 接続をハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-1692 2012-06-26 16:02 2008-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1631 7.3 HIGH
Network
- - An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6 allows attackers to execute arbitrary code via uploading a crafted image file. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-30761 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
1632 7.3 HIGH
Network
- - An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call. CWE-20
 Improper Input Validation 
CVE-2026-30760 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
1633 5.5 MEDIUM
Local
- - IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. _dosToUnixTime() decodes the local-file-header last-modification da… CWE-248
 Uncaught Exception
CVE-2025-15649 2026-05-30 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1634 7.1 HIGH
Network
- - LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_promp… CWE-502
 Deserialization of Untrusted Data
CVE-2026-45134 2026-05-30 01:12 2026-05-28 Show GitHub Exploit DB Packet Storm
1635 5.4 MEDIUM
Network
- - AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute endpoint executes block… CWE-770
CWE-841
 Allocation of Resources Without Limits or Throttling
 Improper Enforcement of Behavioral Workflow
CVE-2026-45023 2026-05-30 01:07 2026-05-29 Show GitHub Exploit DB Packet Storm
1636 7.5 HIGH
Network
google chrome Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox vi… CWE-457
 Use of Uninitialized Variable
CVE-2026-9963 2026-05-30 01:06 2026-05-29 Show GitHub Exploit DB Packet Storm
1637 7.5 HIGH
Network
dell unisphere_for_powermax_virtual_appliance Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the  Unisphere for VMAX application running in vApp CWE-285
Improper Authorization
CVE-2022-34363 2026-05-30 00:53 2026-05-23 Show GitHub Exploit DB Packet Storm
1638 6.5 MEDIUM
Network
golang net Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CWE-400
 Uncontrolled Resource Consumption
CVE-2026-25680 2026-05-30 00:47 2026-05-23 Show GitHub Exploit DB Packet Storm
1639 6.5 MEDIUM
Network
- - The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates are valid when sendi… CWE-295
Improper Certificate Validation 
CVE-2026-44213 2026-05-30 00:42 2026-05-27 Show GitHub Exploit DB Packet Storm
1640 7.1 HIGH
Network
- - Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token… CWE-863
 Incorrect Authorization
CVE-2026-42280 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm