Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3191 4.7 警告
Local 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-28992 2026-05-15 11:03 2026-05-11 Show GitHub Exploit DB Packet Storm
3192 5.5 警告
Local 		アップル visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28993 2026-05-15 11:03 2026-05-11 Show GitHub Exploit DB Packet Storm
3193 5.3 警告
Adjacent 		アップル tvOS
iOS
iPadOS
watchOS 		アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-28994 2026-05-15 11:03 2026-05-11 Show GitHub Exploit DB Packet Storm
3194 9.8 緊急
Network 		Rocket.Chat Rocket.Chat Rocket.ChatにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-29198 2026-05-15 11:03 2026-04-23 Show GitHub Exploit DB Packet Storm
3195 6.5 警告
Network 		Textpattern Textpattern CMS TextpatternのTextpattern CMSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-30452 2026-05-15 11:03 2026-04-21 Show GitHub Exploit DB Packet Storm
3196 9.1 緊急
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-30805 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
3197 8.8 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-30807 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
3198 8.1 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるセッションの固定化の脆弱性 CWE-384
セッションの固定化 		CVE-2026-30808 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
3199 8.8 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-30810 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
3200 7.5 重要
Network 		Python Software Foundation Python Python Software FoundationのPythonにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-3087 2026-05-15 11:03 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318391 5.5 MEDIUM
Local 		ibm cognos_analytics
cognos_analytics_reports 		IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive informa… CWE-522
 Insufficiently Protected Credentials 		CVE-2024-40703 2024-09-28 01:49 2024-09-22 Show GitHub Exploit DB Packet Storm
318392 5.4 MEDIUM
Network 		artembovkun slider_comparison_image_before_and_after The Slider comparison image before and after plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [sciba] shortcode in all versions up to, and including, 0.8.3 due to in… CWE-79
Cross-site Scripting 		CVE-2024-8543 2024-09-28 01:46 2024-09-10 Show GitHub Exploit DB Packet Storm
318393 5.3 MEDIUM
Network 		lilmonkee woocommerce_multiple_free_gift The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin not enforcing server-side checks on the p… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2022-3459 2024-09-28 01:43 2024-09-14 Show GitHub Exploit DB Packet Storm
318394 6.1 MEDIUM
Network 		iredmail iredadmin iRedAdmin before 2.6 allows XSS, e.g., via order_name. CWE-79
Cross-site Scripting 		CVE-2024-47227 2024-09-28 01:37 2024-09-23 Show GitHub Exploit DB Packet Storm
318395 - - - An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords - CVE-2024-46609 2024-09-28 01:35 2024-09-25 Show GitHub Exploit DB Packet Storm
318396 7.5 HIGH
Network 		dataease dataease DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, there is an XML external entity injection vulnerability in the static resource upload interface of DataEase. An a… CWE-611
XXE 		CVE-2024-46985 2024-09-28 01:35 2024-09-24 Show GitHub Exploit DB Packet Storm
318397 6.1 MEDIUM
Network 		wpsimplebookingcalendar wp_simple_booking_calendar The WP Simple Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all v… CWE-79
Cross-site Scripting 		CVE-2024-8663 2024-09-28 01:35 2024-09-13 Show GitHub Exploit DB Packet Storm
318398 5.4 MEDIUM
Network 		gitapp dingfanzu A vulnerability classified as problematic has been found in dingfangzu up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. Affected is an unknown function of the file scripts/order.js of the component Or… CWE-79
Cross-site Scripting 		CVE-2024-9077 2024-09-28 01:31 2024-09-22 Show GitHub Exploit DB Packet Storm
318399 5.4 MEDIUM
Network 		wpdeveloper essential_addons_for_elementor The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterabl… CWE-79
Cross-site Scripting 		CVE-2024-8742 2024-09-28 01:28 2024-09-13 Show GitHub Exploit DB Packet Storm
318400 7.2 HIGH
Network 		rems profile_registration_without_reload\/refresh A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0. This affects an unknown part of the file del.php of the component GET Paramete… CWE-89
SQL Injection 		CVE-2024-9093 2024-09-28 01:26 2024-09-23 Show GitHub Exploit DB Packet Storm