Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1821	5	警告 Local	キヤノン株式会社	CUPS Printer Driver for macOS My Image Garden for macOS	キヤノン製My Image Garden for macOSおよびCUPS Printer Driver for macOSにおけるファイルアクセス時のリンク解釈が不適切な脆弱性	CWE-59 リンク解釈の問題	CVE-2026-6891 CVE-2026-6892	2026-06-1 14:21	2026-05-29	Show	GitHub Exploit DB Packet Storm

1822	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月28日）	-	-	2026-06-1 14:21	2026-05-29	Show	GitHub Exploit DB Packet Storm

1823	7.8	重要 Local	エフサステクノロジーズ株式会社	ServerView Agents for Windows	ServerView Agents for Windowsにおける複数の脆弱性	CWE-Other その他	CVE-2026-27788 CVE-2026-32325	2026-06-1 12:15	2026-06-1	Show	GitHub Exploit DB Packet Storm

1824	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月26日）	-	-	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

1825	-	-	Casbin	Casdoor	Casdoorにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6815	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

1826	9.8	緊急 Network	nx	Nx Console	nxのNx Consoleにおける埋め込まれた悪意のあるコードに関する脆弱性	CWE-506 埋め込まれた悪意のあるコード	CVE-2026-48027	2026-05-29 11:20	2026-05-27	Show	GitHub Exploit DB Packet Storm

1827	9.8	緊急 Network	Jenkins プロジェクト	GitBucket	GitBucketにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25332	2026-05-29 11:20	2026-05-17	Show	GitHub Exploit DB Packet Storm

1828	7.5	重要 Network	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47942	2026-05-29 11:20	2026-05-16	Show	GitHub Exploit DB Packet Storm

1829	7.3	重要 Local	Airbus	TETRA Connectivity Server	AirbusのTETRA Connectivity Serverにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-7024	2026-05-29 11:20	2026-04-3	Show	GitHub Exploit DB Packet Storm

1830	7.5	重要 Network	マイクロソフト	Microsoft Global Secure Access (GSA)	Microsoft グローバルセキュアアクセス (GSA) の情報漏えいの脆弱性	CWE-269 不適切な権限管理	CVE-2026-23663	2026-05-29 11:20	2026-05-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
358291	-	open_webmail	open_webmail	openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify v…	CWE-200 Information Exposure	CVE-2002-2410	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358292	-	nullsoft	winamp	Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.	CWE-255 Credentials Management	CVE-2002-2412	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358293	-	deerfield	website_pro	WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name.	NVD-CWE-Other	CVE-2002-2413	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358294	-	alliedtelesyn	at-8024 rapier_24	Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a runni…	CWE-20 Improper Input Validation	CVE-2002-2415	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358295	-	zeroo	http_server	Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.	CWE-22 Path Traversal	CVE-2002-2416	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358296	-	acftp	acftp	acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and po…	CWE-287 Improper Authentication	CVE-2002-2417	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358297	-	acfp_project	acfreeproxy	Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page.	CWE-79 Cross-site Scripting	CVE-2002-2418	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358298	-	dctc_project	dctc	Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character.	CWE-189 Numeric Errors	CVE-2002-2419	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358299	-	independent_solution	simple_site_searcher super_site_searcher	site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.	CWE-20 Improper Input Validation	CVE-2002-2420	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

358300	-	andrey_cherezov	acweb	acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.	CWE-20 Improper Input Validation	CVE-2002-2421	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed