Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247591 7.5 危険 Digium - Asterisk-Addons の cdr_addon_mysql における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5488 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
247592 6.3 警告 シスコシステムズ (Linksys)
Atheros
- Atheros AR5416-AC1E チップセット上の Linksys WRT350N Wi-Fi アクセスポイントのドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-5474 2012-06-26 15:54 2008-09-5 Show GitHub Exploit DB Packet Storm
247593 9.3 危険 JetAudio - COWON America jetAudio Basic におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5487 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
247594 6.4 警告 dotProject - dotProject における Companies モジュールにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5486 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
247595 5 警告 distributed checksum clearinghouse - DCC におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-5481 2012-06-26 15:54 2007-10-16 Show GitHub Exploit DB Packet Storm
247596 4.3 警告 CA Technologies - CA HIPS の Server コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5472 2012-06-26 15:54 2007-10-18 Show GitHub Exploit DB Packet Storm
247597 5 警告 シスコシステムズ - Cisco CallManager における任意の電話番号への発信または発信者 ID を偽装される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5468 2012-06-26 15:54 2007-10-15 Show GitHub Exploit DB Packet Storm
247598 10 危険 extremail - eXtremail における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2007-5467 2012-06-26 15:54 2007-10-15 Show GitHub Exploit DB Packet Storm
247599 10 危険 extremail - eXtremail におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5466 2012-06-26 15:54 2007-10-15 Show GitHub Exploit DB Packet Storm
247600 6.8 警告 alorys-hebergement - KwsPHP の newsletter モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5458 2012-06-26 15:54 2007-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1381 - - - This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by se… New CWE-22
Path Traversal
CVE-2026-9506 2026-06-9 00:01 2026-06-8 Show GitHub Exploit DB Packet Storm
1382 - - - A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of user-supplied filenames in the MCAD and Simulation file download flows. A regul… Update CWE-22
CWE-269
Path Traversal
 Improper Privilege Management
CVE-2026-11423 2026-06-9 00:00 2026-06-6 Show GitHub Exploit DB Packet Storm
1383 - - - A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can submit a request whose input is t… Update CWE-200
CWE-918
Information Exposure
Server-Side Request Forgery (SSRF) 
CVE-2026-11424 2026-06-9 00:00 2026-06-6 Show GitHub Exploit DB Packet Storm
1384 - - - A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypas… Update CWE-22
CWE-200
Path Traversal
Information Exposure
CVE-2026-11431 2026-06-9 00:00 2026-06-6 Show GitHub Exploit DB Packet Storm
1385 8.1 HIGH
Network
termix termix Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /users/totp/disable` and `POST /users/totp/backup-codes` endpoints in Termix pr… Update CWE-308
 Use of Single-factor Authentication
CVE-2026-45749 2026-06-8 23:59 2026-06-6 Show GitHub Exploit DB Packet Storm
1386 6.4 MEDIUM
Network
- - WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the preset parameter. Attackers… New CWE-79
Cross-site Scripting
CVE-2021-47982 2026-06-8 23:59 2026-06-8 Show GitHub Exploit DB Packet Storm
1387 6.4 MEDIUM
Network
- - WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[… New CWE-79
Cross-site Scripting
CVE-2021-47983 2026-06-8 23:59 2026-06-8 Show GitHub Exploit DB Packet Storm
1388 6.4 MEDIUM
Network
- - WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldn… New CWE-79
Cross-site Scripting
CVE-2021-47984 2026-06-8 23:59 2026-06-8 Show GitHub Exploit DB Packet Storm
1389 6.2 MEDIUM
Local
- - WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path param… New CWE-22
Path Traversal
CVE-2022-50953 2026-06-8 23:59 2026-06-8 Show GitHub Exploit DB Packet Storm
1390 7.5 HIGH
Network
- - WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary PHP files. Attackers … New CWE-306
Missing Authentication for Critical Function
CVE-2023-54350 2026-06-8 23:59 2026-06-8 Show GitHub Exploit DB Packet Storm