Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
247421	7.2	危険	AVAST Software s.r.o.	-	avast! Home and Professional の aswRdr.sys におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4049	2012-06-26 16:18	2009-11-23	Show	GitHub Exploit DB Packet Storm

247422	4	警告	dxmsoft	-	Dxmsoft XM Easy Personal FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4048	2012-06-26 16:18	2009-11-23	Show	GitHub Exploit DB Packet Storm

247423	7.5	危険	FrontAccounting	-	FA における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4046	2012-06-26 16:18	2009-10-24	Show	GitHub Exploit DB Packet Storm

247424	7.5	危険	FrontAccounting	-	FA における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4045	2012-06-26 16:18	2009-10-24	Show	GitHub Exploit DB Packet Storm

247425	7.5	危険	Drupal bruno massa	-	Drupal の Web Services モジュールにおける API を使用をされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4044	2012-06-26 16:18	2009-11-20	Show	GitHub Exploit DB Packet Storm

247426	7.5	危険	FrontAccounting	-	FA における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4037	2012-06-26 16:18	2009-11-20	Show	GitHub Exploit DB Packet Storm

247427	7.5	危険	Debian	-	Lintian におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2009-4014	2012-06-26 16:18	2010-01-27	Show	GitHub Exploit DB Packet Storm

247428	7.5	危険	Debian	-	Lintian におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4013	2012-06-26 16:18	2010-01-27	Show	GitHub Exploit DB Packet Storm

247429	9.3	危険	denton woods	-	DevIL の GetUID 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3994	2012-06-26 16:18	2009-12-8	Show	GitHub Exploit DB Packet Storm

247430	9.3	危険	faslo	-	Faslo Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3969	2012-06-26 16:18	2009-11-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3061	8.2	HIGH Network	-	-	WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicio…	CWE-89 SQL Injection	CVE-2016-20068	2026-06-15 23:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

3062	4.3	MEDIUM Network	-	-	WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML…	CWE-352 Origin Validation Error	CVE-2016-20067	2026-06-15 23:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

3063	7.2	HIGH Network	-	-	WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. Attackers can upload…	CWE-79 Cross-site Scripting	CVE-2016-20066	2026-06-15 23:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

3064	6.5	MEDIUM Network	microsoft	visual_studio_code	Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.	CWE-23 Relative Path Traversal	CVE-2026-47287	2026-06-15 23:15	2026-06-10	Show	GitHub Exploit DB Packet Storm

3065	6.5	MEDIUM Network	microsoft	visual_studio_code	Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.	CWE-200 NVD-CWE-noinfo Information Exposure	CVE-2026-47284	2026-06-15 23:15	2026-06-10	Show	GitHub Exploit DB Packet Storm

3066	9.6	CRITICAL Network	microsoft	visual_studio_code	Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.	CWE-306 CWE-798 CWE-862 Missing Authentication for Critical Function Use of Hard-coded Credentials Missing Authorization	CVE-2026-47281	2026-06-15 23:14	2026-06-10	Show	GitHub Exploit DB Packet Storm

3067	4.3	MEDIUM Network	microsoft	bing	User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network.	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-45650	2026-06-15 23:09	2026-06-10	Show	GitHub Exploit DB Packet Storm

3068	5.7	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that…	CWE-20 Improper Input Validation	CVE-2026-20257	2026-06-15 23:05	2026-06-11	Show	GitHub Exploit DB Packet Storm

3069	8.8	HIGH Network	flowiseai	flowise	Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-workspace template takeo…	CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes	CVE-2026-46476	2026-06-15 23:04	2026-06-9	Show	GitHub Exploit DB Packet Storm

3070	5.4	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that…	CWE-79 Cross-site Scripting	CVE-2026-20258	2026-06-15 23:03	2026-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed