Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
91	7.2	重要 Network	Apache Software Foundation	APISIX	Apache Software FoundationのAPISIXにおけるオープンリダイレクトの脆弱性 New	CWE-601 オープンリダイレクト	CVE-2026-48895	2026-06-26 11:56	2026-06-19	Show	GitHub Exploit DB Packet Storm

92	5.3	警告 Network	markdown-it project	markdown-it	markdown-it projectのmarkdown-itにおけるリソースの枯渇に関する脆弱性 New	CWE-400 リソースの枯渇	CVE-2026-48988	2026-06-26 11:56	2026-06-17	Show	GitHub Exploit DB Packet Storm

93	9.1	緊急 Network	Apache Software Foundation	APISIX	Apache Software FoundationのAPISIXにおけるデータの整合性検証不備に関する脆弱性 New	CWE-354 データの整合性検証不備	CVE-2026-49230	2026-06-26 11:56	2026-06-19	Show	GitHub Exploit DB Packet Storm

94	5.4	警告 Network	Apache Software Foundation	APISIX	Apache Software FoundationのAPISIXにおけるスプーフィングによる認証回避に関する脆弱性 New	CWE-290 スプーフィングによる認証回避	CVE-2026-49231	2026-06-26 11:56	2026-06-19	Show	GitHub Exploit DB Packet Storm

95	3.3	低 Local	pypdf project	pypdf	pypdf projectのpypdfにおけるアルゴリズムの複雑さに関する脆弱性 New	CWE-407 アルゴリズムの複雑性	CVE-2026-49460	2026-06-26 11:56	2026-06-22	Show	GitHub Exploit DB Packet Storm

96	5.5	警告 Local	pypdf project	pypdf	pypdf projectのpypdfにおけるリソースの枯渇に関する脆弱性 New	CWE-400 リソースの枯渇	CVE-2026-49461	2026-06-26 11:56	2026-06-22	Show	GitHub Exploit DB Packet Storm

97	9.8	緊急 Network	litellm	litellm	LiteLLMにおけるスプーフィングによる認証回避に関する脆弱性 New	CWE-290 スプーフィングによる認証回避	CVE-2026-49468	2026-06-26 11:56	2026-06-22	Show	GitHub Exploit DB Packet Storm

98	5.4	警告 Network	Eclipse Foundation	Eclipse Open VSX	Eclipse FoundationのEclipse Open VSXにおけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-4983	2026-06-26 11:56	2026-06-23	Show	GitHub Exploit DB Packet Storm

99	9.3	緊急 Network	Apache Software Foundation	APISIX	Apache Software FoundationのAPISIXにおけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 同一生成元ポリシー違反	CVE-2026-49871	2026-06-26 11:56	2026-06-19	Show	GitHub Exploit DB Packet Storm

100	8.1	重要 Network	Apache Software Foundation	APISIX	Apache Software FoundationのAPISIXにおける認証に関する脆弱性 New	CWE-287 不適切な認証	CVE-2026-49872	2026-06-26 11:56	2026-06-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256961	7.8	HIGH Local	google	android	In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write.	CWE-787 Out-of-bounds Write	CVE-2017-8233	2024-11-21 12:33	2017-06-14	Show	GitHub Exploit DB Packet Storm

256962	7.8	HIGH Local	cisofy	lynis	Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.	CWE-59 Link Following	CVE-2017-8108	2024-11-21 12:33	2017-06-9	Show	GitHub Exploit DB Packet Storm

256963	8.8	HIGH Network	schneider-electric	somachine	A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability ex…	CWE-427 Uncontrolled Search Path Element	CVE-2017-7966	2024-11-21 12:33	2017-06-8	Show	GitHub Exploit DB Packet Storm

256964	7.3	HIGH Local	schneider-electric	somachine_hvac	A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7965	2024-11-21 12:33	2017-06-8	Show	GitHub Exploit DB Packet Storm

256965	6.7	MEDIUM Local	compulab	intense_pc_firmware mintbox_2_firmware	CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a …	CWE-862 Missing Authorization	CVE-2017-8083	2024-11-21 12:33	2017-06-6	Show	GitHub Exploit DB Packet Storm

256966	8.8	HIGH Network	git opensuse debian canonical fedoraproject	git-shell leap debian_linux ubuntu_linux fedora	git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.…	NVD-CWE-noinfo	CVE-2017-8386	2024-11-21 12:33	2017-06-2	Show	GitHub Exploit DB Packet Storm

256967	6.5	MEDIUM Network	eucalyptus	eucalyptus	Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service (E2 service outage) via unspecified vectors.	NVD-CWE-noinfo	CVE-2017-7999	2024-11-21 12:33	2017-06-2	Show	GitHub Exploit DB Packet Storm

256968	8.8	HIGH Network	pivotx	pivotx	PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file.	CWE-94 Code Injection	CVE-2017-8402	2024-11-21 12:33	2017-05-31	Show	GitHub Exploit DB Packet Storm

256969	5.5	MEDIUM Local	kodi debian	kodi debian_linux	Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.	CWE-22 Path Traversal	CVE-2017-8314	2024-11-21 12:33	2017-05-24	Show	GitHub Exploit DB Packet Storm

256970	5.5	MEDIUM Local	videolan	vlc_media_player	Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via …	CWE-125 Out-of-bounds Read	CVE-2017-8313	2024-11-21 12:33	2017-05-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed