Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249911 7.5 危険 enthrallweb - Enthrallweb eShopping Cart における SQL インジェクションの脆弱性 - CVE-2006-6073 2012-06-26 15:37 2006-11-24 Show GitHub Exploit DB Packet Storm
249912 7.5 危険 bpg-infotech - BPG-InfoTech Easy Publisher の bpg/publications_list.asp における SQL インジェクションの脆弱性 - CVE-2006-6072 2012-06-26 15:37 2006-11-24 Show GitHub Exploit DB Packet Storm
249913 7.5 危険 asp-nuke - ASP Nuke の module/account/register/register.asp における SQL インジェクションの脆弱性 - CVE-2006-6070 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
249914 7.5 危険 20 20 applications - 20/20 DataShed における SQL インジェクションの脆弱性 - CVE-2006-6067 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
249915 7.5 危険 dragon internet - Dragon Calendar / Events Listing における SQL インジェクションの脆弱性 - CVE-2006-6066 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
249916 7.5 危険 fuzzball muck - Fuzzball MUCK の MPI におけるバッファオーバーフローの脆弱性 - CVE-2006-6064 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
249917 10 危険 D-Link Systems, Inc. - D-Link DWL-G132 無線アダプタの A5AGU.SYS におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-6055 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
249918 7.5 危険 clicktech - ClickTech Texas Rank'em における SQL インジェクションの脆弱性 - CVE-2006-6050 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
249919 6.8 警告 Etomite Project - Etomite CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-6048 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
249920 5.8 警告 Etomite Project - Etomite の manager/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2006-6047 2012-06-26 15:37 2006-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3751 6.3 MEDIUM
Network
- - FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/src/pool/worker.ts:356 blocks dynamic import() with the regex /\bimport\s*\(/.t… CWE-94
CWE-184
Code Injection
 Incomplete Blacklist
CVE-2026-44287 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3752 7.5 HIGH
Network
- - xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint that allows unauthenticated attackers to read arbitrary files outside the intende… CWE-22
Path Traversal
CVE-2026-10108 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3753 7.3 HIGH
Network
- - A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument roll results in… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10110 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3754 7.3 HIGH
Network
- - A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can lead to sql injectio… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10111 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3755 2.4 LOW
Network
- - A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site s… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-10112 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3756 4.3 MEDIUM
Network
- - A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. The manip… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-10113 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3757 7.5 HIGH
Network
- - The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including, 5.26.0 via the ev… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-7459 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3758 4.3 MEDIUM
Network
- - A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_sbi_xact_add in the library /lib/core/ogs-timer.c of the component ue-authentications Endpoint.… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-10116 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3759 4.3 MEDIUM
Network
- - A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a manipulation can lead to denial of serv… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-10117 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3760 8.8 HIGH
Network
- - The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible f… CWE-269
 Improper Privilege Management
CVE-2026-7465 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm