Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189061 7.5 重要
Network
Samba Project - rsync におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2018-5764 2018-02-16 17:06 2018-01-10 Show GitHub Exploit DB Packet Storm
189062 7.5 重要
Network
General Motors - Shanghai OnStar - General Motors - Shanghai OnStar の SOS iOS Client における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-9663 2018-02-16 17:06 2017-06-14 Show GitHub Exploit DB Packet Storm
189063 5.9 警告
Network
General Motors - Shanghai OnStar - General Motors - Shanghai OnStar の SOS iOS Client における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-12697 2018-02-16 17:06 2017-08-9 Show GitHub Exploit DB Packet Storm
189064 8.8 重要
Network
General Motors - Shanghai OnStar - General Motors - Shanghai OnStar の SOS iOS Client における認証に関する脆弱性 CWE-287
不適切な認証
CVE-2017-12695 2018-02-16 17:06 2017-08-9 Show GitHub Exploit DB Packet Storm
189065 6.5 警告
Network
OpenJPEG project - OpenJPEG における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2018-5727 2018-02-16 16:46 2018-01-13 Show GitHub Exploit DB Packet Storm
189066 6.1 警告
Network
SugarCRM - SugarCRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-5715 2018-02-16 16:46 2018-01-16 Show GitHub Exploit DB Packet Storm
189067 5.9 警告
Network
Linux - Linux Kernel における競合状態に関する脆弱性 CWE-362
競合状態
CVE-2018-1000004 2018-02-16 16:46 2018-01-16 Show GitHub Exploit DB Packet Storm
189068 7.5 重要
Network
jQuery - jQuery におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2016-10707 2018-02-16 16:46 2016-06-4 Show GitHub Exploit DB Packet Storm
189069 6.1 警告
Network
jQuery - jQuery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6708 2018-02-16 16:45 2012-12-13 Show GitHub Exploit DB Packet Storm
189070 5.4 警告
Network
Zimbra - Zimbra Collaboration Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-8802 2018-02-16 16:36 2017-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1991 - - - Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2025-62180 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1992 - - - Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including att… CWE-183
CWE-200
CWE-515
 Permissive List of Allowed Inputs
Information Exposure
CVE-2026-54316 2026-06-24 04:32 2026-06-24 Show GitHub Exploit DB Packet Storm
1993 7.5 HIGH
Network
- - An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CWE-89
SQL Injection
CVE-2025-61024 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm
1994 7.5 HIGH
Network
- - An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CWE-89
SQL Injection
CVE-2025-61029 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm
1995 5.3 MEDIUM
Network
apache nifi Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided… CWE-346
 Origin Validation Error
CVE-2026-54665 2026-06-24 04:19 2026-06-22 Show GitHub Exploit DB Packet Storm
1996 8.1 HIGH
Network
- - picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Mali… CWE-502
 Deserialization of Untrusted Data
CVE-2025-71344 2026-06-24 04:17 2026-06-23 Show GitHub Exploit DB Packet Storm
1997 7.5 HIGH
Network
- - Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CVE-2023-44487 / CVE-… CWE-400
 Uncontrolled Resource Consumption
CVE-2023-54365 2026-06-24 04:17 2026-06-23 Show GitHub Exploit DB Packet Storm
1998 5.4 MEDIUM
Network
- - NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent … CWE-863
 Incorrect Authorization
CVE-2026-56694 2026-06-24 03:18 2026-06-24 Show GitHub Exploit DB Packet Storm
1999 6.5 MEDIUM
Network
- - NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can a… CWE-862
 Missing Authorization
CVE-2026-56402 2026-06-24 03:18 2026-06-24 Show GitHub Exploit DB Packet Storm
2000 8.8 HIGH
Network
- - A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged user could add an unexpected component parameter and inject malicious… CWE-94
Code Injection
CVE-2026-44959 2026-06-24 03:17 2026-06-24 Show GitHub Exploit DB Packet Storm