Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
189111	6.5	警告 Network	CohuHD Costar, LLC	-	Cohu 3960HD における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-8860	2017-12-25 16:54	2017-05-12	Show	GitHub Exploit DB Packet Storm

189112	7.8	重要 Local	libxls project	-	libxls におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-2919	2017-12-25 16:23	2017-11-15	Show	GitHub Exploit DB Packet Storm

189113	7.8	重要 Local	libxls project	-	libxls における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2017-2897	2017-12-25 16:23	2017-11-15	Show	GitHub Exploit DB Packet Storm

189114	7.8	重要 Local	libxls project	-	libxls における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2017-2896	2017-12-25 16:23	2017-11-15	Show	GitHub Exploit DB Packet Storm

189115	7.8	重要 Local	libxls project	-	libxls における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2017-12111	2017-12-25 16:23	2017-11-15	Show	GitHub Exploit DB Packet Storm

189116	7.8	重要 Local	libxls project	-	libxls における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2017-12110	2017-12-25 16:23	2017-11-15	Show	GitHub Exploit DB Packet Storm

189117	9.8	緊急 Network	QNAP Systems	-	QNAP Video Station におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2017-13071	2017-12-25 15:59	2017-11-21	Show	GitHub Exploit DB Packet Storm

189118	5.5	警告 Local	Linux	-	Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-12193	2017-12-25 15:59	2017-11-2	Show	GitHub Exploit DB Packet Storm

189119	6.5	警告 Network	PostgreSQL.org Debian	-	PostgreSQL における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-15099	2017-12-25 15:59	2017-11-9	Show	GitHub Exploit DB Packet Storm

189120	8.1	重要 Network	PostgreSQL.org Debian	-	PostgreSQL における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-15098	2017-12-25 15:59	2017-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
411	4.3	MEDIUM Network	-	-	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Hash Elements: from n… New	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-24618	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

412	3.5	LOW Network	-	-	A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of the file /Projects/Add_Projects of the component Projects Management Page. The m… New	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-12130	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

413	3.5	LOW Network	-	-	A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/add_tod of the component Dashboard Interf… New	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-12129	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

414	5.5	MEDIUM Local	mongodb	mongodb	The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text. Update	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-9751	2026-06-13 05:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

415	7.5	HIGH Network	vmware	spring_security	An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates … Update	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40988	2026-06-13 05:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

416	5.4	MEDIUM Network	vmware	spring_security	An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 throug… Update	CWE-79 Cross-site Scripting	CVE-2026-41003	2026-06-13 05:30	2026-06-10	Show	GitHub Exploit DB Packet Storm

417	5.3	MEDIUM Network	vmware	spring_security	Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloa… Update	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-41694	2026-06-13 05:28	2026-06-10	Show	GitHub Exploit DB Packet Storm

418	9.8	CRITICAL Network	qnap	qts	QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later Update	NVD-CWE-noinfo	CVE-2025-66276	2026-06-13 05:25	2026-06-10	Show	GitHub Exploit DB Packet Storm

419	6.5	MEDIUM Network	qnap	qts quts_hero	A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read… Update	CWE-22 Path Traversal	CVE-2026-24717	2026-06-13 05:21	2026-06-10	Show	GitHub Exploit DB Packet Storm

420	-		-	-	MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegations, and shadow attributes. Several controller actions accepted user-supplied fi… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-54361	2026-06-13 05:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed