Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
189011	7.8	重要 Local	Xen プロジェクト	-	Xen におけるデータ処理に関する脆弱性	CWE-19 データ処理	CVE-2017-17566	2018-01-12 15:30	2017-12-12	Show	GitHub Exploit DB Packet Storm

189012	5.6	警告 Local	Xen プロジェクト	-	Xen における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-17565	2018-01-12 15:30	2017-12-12	Show	GitHub Exploit DB Packet Storm

189013	7.8	重要 Local	Xen プロジェクト	-	Xen におけるエラー処理に関する脆弱性	CWE-388 エラー処理	CVE-2017-17564	2018-01-12 15:30	2017-12-12	Show	GitHub Exploit DB Packet Storm

189014	7.8	重要 Local	Xen プロジェクト	-	Xen におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-17563	2018-01-12 15:30	2017-12-12	Show	GitHub Exploit DB Packet Storm

189015	7.2	重要 Network	フォーティネット	-	Fortinet FortiOS における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-7738	2018-01-12 14:15	2017-12-8	Show	GitHub Exploit DB Packet Storm

189016	8.6	重要 Network	VMware	-	Harbor におけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2017-17697	2018-01-12 14:15	2017-12-27	Show	GitHub Exploit DB Packet Storm

189017	5.5	警告 Local	Exiv2 project	-	Exiv2 におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-17669	2018-01-12 14:15	2017-12-10	Show	GitHub Exploit DB Packet Storm

189018	7.5	重要 Network	npm, Inc.	-	ecstatic npm パッケージにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2016-10703	2018-01-12 14:15	2016-08-10	Show	GitHub Exploit DB Packet Storm

189019	9.8	緊急 Network	Mercurial	-	Mercurial における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2017-17458	2018-01-12 12:18	2017-11-7	Show	GitHub Exploit DB Packet Storm

189020	7.5	重要 Network	npm, Inc.	-	marked npm パッケージにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-17461	2018-01-12 12:14	2017-12-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1131	9.8	CRITICAL Network	-	-	Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass. This issue …	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2026-6853	2026-06-13 00:51	2026-06-13	Show	GitHub Exploit DB Packet Storm

1132	6.5	MEDIUM Network	apache	apache-airflow-providers-samba	The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../` segments resolved a write path …	CWE-22 Path Traversal	CVE-2026-49818	2026-06-13 00:51	2026-06-9	Show	GitHub Exploit DB Packet Storm

1133	9.8	CRITICAL Network	qnap	qumagie	An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges. We have …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44083	2026-06-13 00:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

1134	6.5	MEDIUM Network	qnap	qts quts_hero	A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to mod…	CWE-121 Stack-based Buffer Overflow	CVE-2025-62858	2026-06-13 00:44	2026-06-9	Show	GitHub Exploit DB Packet Storm

1135	5.4	MEDIUM Network	microsoft	sharepoint_server	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	CWE-502 CWE-79 Deserialization of Untrusted Data Cross-site Scripting	CVE-2026-48560	2026-06-13 00:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

1136	4.6	MEDIUM Network	microsoft	sharepoint_server	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	CWE-79 Cross-site Scripting	CVE-2026-48562	2026-06-13 00:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

1137	6.1	MEDIUM Network	qnap	qts quts_hero	A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or…	CWE-79 Cross-site Scripting	CVE-2026-41539	2026-06-13 00:37	2026-06-9	Show	GitHub Exploit DB Packet Storm

1138	7.5	HIGH Network	qnap	qumagie	A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We hav…	CWE-862 Missing Authorization	CVE-2026-26236	2026-06-13 00:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

1139	7.8	HIGH Local	siemens	sinec_ins	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a binary that is configured with the cap_dac_override capability. This capability all…	CWE-250 Execution with Unnecessary Privileges	CVE-2026-46748	2026-06-13 00:33	2026-06-9	Show	GitHub Exploit DB Packet Storm

1140	-		-	-	Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-priv…	CWE-22 Path Traversal	CVE-2026-45171	2026-06-13 00:30	2026-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed