Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
188801 7 重要
Local
VMware - VMware Workstation および Fusion における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-4949 2018-02-28 16:51 2018-01-10 Show GitHub Exploit DB Packet Storm
188802 8.1 重要
Network
Fedora Project - 389-ds-base における認証に関する脆弱性 CWE-287
不適切な認証
CVE-2017-15135 2018-02-28 16:50 2017-12-13 Show GitHub Exploit DB Packet Storm
188803 8.8 重要
Network
Electron - Electron における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2018-1000006 2018-02-28 16:46 2018-01-22 Show GitHub Exploit DB Packet Storm
188804 9.1 緊急
Network
Tinder - iOS および Android 用アプリケーション Tinder における暗号に関する脆弱性 CWE-310
暗号の問題
CVE-2018-6017 2018-02-28 16:46 2018-01-23 Show GitHub Exploit DB Packet Storm
188805 9.8 緊急
Network
NetIQ - NetIQ Access Manager における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2018-1342 2018-02-28 16:43 2018-01-25 Show GitHub Exploit DB Packet Storm
188806 7.5 重要
Network
Debian
Michael Bleigh and Intridea, Inc.
- OmniAuth におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-18076 2018-02-28 16:43 2017-01-25 Show GitHub Exploit DB Packet Storm
188807 8.8 重要
Network
Atlassian - SourceTree におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2017-14593 2018-02-28 16:43 2017-12-21 Show GitHub Exploit DB Packet Storm
188808 4.3 警告
Network
Jenkins プロジェクト - Jenkins における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-1000398 2018-02-28 16:43 2017-10-11 Show GitHub Exploit DB Packet Storm
188809 5.3 警告
Network
Parity Technologies - Parity Browser におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2017-18016 2018-02-28 16:40 2017-06-23 Show GitHub Exploit DB Packet Storm
188810 9.8 緊急
Network
Seagate Technology LLC - Seagate Personal Cloud におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2018-5347 2018-02-28 16:37 2018-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 7.3 HIGH
Local
vim vim Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries… CWE-77
Command Injection
CVE-2026-57453 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1292 7.2 HIGH
Network
- - Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with rem… CWE-22
Path Traversal
CVE-2026-49506 2026-06-27 02:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1293 7.5 HIGH
Network
- - The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption. - CVE-2026-46602 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1294 7.5 HIGH
Network
- - The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. - CVE-2026-46601 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1295 7.5 HIGH
Network
- - An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via supplying a crafted PSD file. CWE-400
 Uncontrolled Resource Consumption
CVE-2026-30041 2026-06-27 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
1296 6.5 MEDIUM
Network
- - A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary code in the context of the current process via supplying a crafted JPEG 2000 (… CWE-122
Heap-based Buffer Overflow
CVE-2026-30040 2026-06-27 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
1297 8.4 HIGH
Local
- - Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device P… CWE-639
CWE-862
 Authorization Bypass Through User-Controlled Key
 Missing Authorization
CVE-2026-12411 2026-06-27 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
1298 7.5 HIGH
Network
- - Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared… CWE-335
 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
CVE-2026-11702 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1299 7.5 HIGH
Network
- - Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the in… CWE-335
 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
CVE-2026-11625 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1300 7.5 HIGH
Network
wolfssl wolfssl wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation. Ciphertex… CWE-697
 Incorrect Comparison
CVE-2026-10097 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm