Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1381 5.5 警告
Local 		ERLANG Erl Interface
Erlang/OTP 		ERLANGのErl Interface等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-49760 2026-06-16 13:40 2026-06-10 Show GitHub Exploit DB Packet Storm
1382 5.7 警告
Adjacent 		nuxt nuxt/webpack-builder
nuxt/rspack-builder 		Nuxtのnuxt/rspack-builder等の複数製品における危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開 		CVE-2026-49993 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
1383 9.8 緊急
Network 		jmespath project jmespath JMESPathにおける複数の脆弱性 CWE-116
CWE-20
CWE-94
CVE-2026-54133 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
1384 5.5 警告
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-24165 2026-06-16 13:39 2026-06-11 Show GitHub Exploit DB Packet Storm
1385 5.5 警告
Local 		- アップルのmacOSにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2025-43278 2026-06-16 13:39 2026-06-11 Show GitHub Exploit DB Packet Storm
1386 5.5 警告
Local 		- アップルのmacOSにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2025-46313 2026-06-16 13:39 2026-06-11 Show GitHub Exploit DB Packet Storm
1387 7.2 重要
Network 		QNAP Systems QuTS hero QNAP SystemsのQuTS heroにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-62850 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
1388 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-66273 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
1389 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-66279 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
1390 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品における複数の脆弱性 CWE-121
CWE-190
CVE-2025-66280 2026-06-16 13:39 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258961 6.5 MEDIUM
Network 		owncloud owncloud ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service (server hang and logfile flooding) via a o… CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-5867 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258962 4.3 MEDIUM
Network 		owncloud owncloud The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensit… CWE-200
Information Exposure 		CVE-2017-5866 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258963 3.7 LOW
Network 		owncloud owncloud The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is v… CWE-200
Information Exposure 		CVE-2017-5865 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258964 7.5 HIGH
Network 		libimobiledevice libplist The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an inv… CWE-415
 Double Free 		CVE-2017-5836 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258965 7.5 HIGH
Network 		libimobiledevice libplist libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2017-5835 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258966 5.5 MEDIUM
Local 		libimobiledevice libplist The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file. CWE-125
Out-of-bounds Read 		CVE-2017-5834 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258967 6.1 MEDIUM
Network 		revive-adserver revive_adserver Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via un… CWE-79
Cross-site Scripting 		CVE-2017-5833 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258968 5.4 MEDIUM
Network 		revive-adserver revive_adserver Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address. CWE-79
Cross-site Scripting 		CVE-2017-5832 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258969 5.9 MEDIUM
Network 		revive-adserver revive_adserver Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID. CWE-384
 Session Fixation 		CVE-2017-5831 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
258970 9.8 CRITICAL
Network 		revive-adserver revive_adserver Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts. CWE-502
 Deserialization of Untrusted Data 		CVE-2017-5830 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm