Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
121	8.8	重要 Network	vLLM	vLLM	vLLMにおける制御されていない検索パスの要素に関する脆弱性 New	CWE-427 制御されていない検索パスの要素	CVE-2026-54232	2026-06-26 11:55	2026-06-22	Show	GitHub Exploit DB Packet Storm

122	6.5	警告 Network	vLLM	vLLM	vLLMにおける高圧縮データの処理 (データ増幅)に関する脆弱性 New	CWE-409 高圧縮データの不適切な処理 (データ増幅)	CVE-2026-54233	2026-06-26 11:55	2026-06-22	Show	GitHub Exploit DB Packet Storm

123	6.5	警告 Network	vLLM	vLLM	vLLMにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性 New	CWE-1287 指定されたタイプの入力に対する不適切な検証	CVE-2026-54235	2026-06-26 11:55	2026-06-22	Show	GitHub Exploit DB Packet Storm

124	5.3	警告 Network	vLLM	vLLM	vLLMにおけるログファイルからの情報漏えいに関する脆弱性 New	CWE-532 ログファイルからの情報漏えい	CVE-2026-54236	2026-06-26 11:55	2026-06-22	Show	GitHub Exploit DB Packet Storm

125	5.3	警告 Network	protobufjs project	protobufjs-cli protobufjs	protobufjs projectのprotobufjs-cli等の複数製品における複数の脆弱性 New	CWE-674 CWE-754	CVE-2026-54269	2026-06-26 11:55	2026-06-22	Show	GitHub Exploit DB Packet Storm

126	5.3	警告 Network	protobufjs project	protobufjs	protobufjs projectのprotobufjsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-54270	2026-06-26 11:55	2026-06-22	Show	GitHub Exploit DB Packet Storm

127	8.2	重要 Network	protobufjs project	protobufjs-cli	protobufjs projectのprotobufjs-cliにおけるコードインジェクションの脆弱性 New	CWE-94 コード・インジェクション	CVE-2026-54271	2026-06-26 11:55	2026-06-22	Show	GitHub Exploit DB Packet Storm

128	7.5	重要 Network	Astro	Astro	Astroにおける複数の脆弱性 New	CWE-20 CWE-918	CVE-2026-54299	2026-06-26 11:54	2026-06-22	Show	GitHub Exploit DB Packet Storm

129	5.4	警告 Network	n8n	n8n	n8nにおけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-54303	2026-06-26 11:54	2026-06-23	Show	GitHub Exploit DB Packet Storm

130	10	緊急 Network	n8n	n8n	n8nにおける重要な機能に対する認証の欠如に関する脆弱性 New	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-54309	2026-06-26 11:54	2026-06-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256971	6.1	MEDIUM Network	dotcms	dotcms	XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.	CWE-79 Cross-site Scripting	CVE-2017-5876	2024-11-21 12:28	2017-02-7	Show	GitHub Exploit DB Packet Storm

256972	5.4	MEDIUM Network	dotcms	dotcms	XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.	CWE-79 Cross-site Scripting	CVE-2017-5875	2024-11-21 12:28	2017-02-7	Show	GitHub Exploit DB Packet Storm

256973	6.1	MEDIUM Network	sanadata	sanacms	Cross-site scripting (XSS) vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter.	CWE-79 Cross-site Scripting	CVE-2017-5882	2024-11-21 12:28	2017-02-5	Show	GitHub Exploit DB Packet Storm

256974	6.5	MEDIUM Network	splunk	splunk	Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.0.17 and Splunk Ligh…	CWE-20 Improper Input Validation	CVE-2017-5880	2024-11-21 12:28	2017-02-4	Show	GitHub Exploit DB Packet Storm

256975	7.5	HIGH Network	php	pear	PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via cr…	CWE-74 Injection	CVE-2017-5630	2024-11-21 12:28	2017-02-2	Show	GitHub Exploit DB Packet Storm

256976	6.5	MEDIUM Adjacent	asus	rt-n56u_firmware	An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the de…	NVD-CWE-noinfo	CVE-2017-5632	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

256977	7.8	HIGH Local	artifex	mujs	An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow wh…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5628	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

256978	7.8	HIGH Local	artifex	mujs	An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads t…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5627	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

256979	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or…	CWE-79 Cross-site Scripting	CVE-2017-5612	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

256980	9.8	CRITICAL Network	wordpress debian oracle	wordpress debian_linux data_integrator	SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected…	CWE-89 SQL Injection	CVE-2017-5611	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed