Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189831 5.5 警告
Local 		LAME project - LAME におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-15018 2017-10-24 17:59 2017-10-22 Show GitHub Exploit DB Packet Storm
189832 7.5 重要
Network 		ImageMagick - ImageMagick におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2017-15033 2017-10-24 17:56 2017-09-14 Show GitHub Exploit DB Packet Storm
189833 5.4 警告
Network 		シスコシステムズ - Cisco Spark におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12269 2017-10-24 17:56 2017-10-4 Show GitHub Exploit DB Packet Storm
189834 6.1 警告
Network 		シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12265 2017-10-24 17:56 2017-10-4 Show GitHub Exploit DB Packet Storm
189835 6.1 警告
Network 		シスコシステムズ - Cisco Unified Communications Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12258 2017-10-24 17:56 2017-10-4 Show GitHub Exploit DB Packet Storm
189836 9.1 緊急
Network 		レッドハット - Red Hat Enterprise Virtualization Manager におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2015-7544 2017-10-24 16:58 2015-10-7 Show GitHub Exploit DB Packet Storm
189837 8.8 重要
Network 		oVirt - Red Hat Enterprise Virtualization パッケージの ovirt-node における書式文字列に関する脆弱性 CWE-134
書式文字列の問題 		CVE-2014-8170 2017-10-24 16:57 2014-10-10 Show GitHub Exploit DB Packet Storm
189838 6.1 警告
Network 		SmarterTools Inc. - SmarterStats におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14620 2017-10-24 16:56 2017-09-18 Show GitHub Exploit DB Packet Storm
189839 9.8 緊急
Network 		Intelbras - Intelbras WRN 150 デバイスにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-14942 2017-10-24 16:51 2017-09-27 Show GitHub Exploit DB Packet Storm
189840 9.8 緊急
Network 		- HPE SiteScope におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-14349 2017-10-24 16:47 2017-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 9.8 CRITICAL
Network 		- - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Update - CVE-2026-9642 2026-06-4 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
142 - - - An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. New CWE-79
Cross-site Scripting 		CVE-2026-5385 2026-06-4 01:16 2026-06-3 Show GitHub Exploit DB Packet Storm
143 8.0 HIGH
Network 		- - A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The… New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-5241 2026-06-4 01:16 2026-06-3 Show GitHub Exploit DB Packet Storm
144 6.5 MEDIUM
Adjacent 		- - BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to read arbitrary files.… New CWE-22
Path Traversal 		CVE-2026-49144 2026-06-4 01:16 2026-06-3 Show GitHub Exploit DB Packet Storm
145 - - - Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multipart.part_headers_fo… New CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-48598 2026-06-4 01:16 2026-06-3 Show GitHub Exploit DB Packet Storm
146 - - - Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.open_conn/2 conv… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-48597 2026-06-4 01:16 2026-06-3 Show GitHub Exploit DB Packet Storm
147 - - - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies. When Tesla.Middleware.… New CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification) 		CVE-2026-48594 2026-06-4 01:16 2026-06-3 Show GitHub Exploit DB Packet Storm
148 - - - GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0.7, an authenticated user with config READ permission can read a specific asset… New CWE-862
 Missing Authorization 		CVE-2026-44281 2026-06-4 01:16 2026-06-4 Show GitHub Exploit DB Packet Storm
149 7.5 HIGH
Network 		- - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. New CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-42504 2026-06-4 01:16 2026-06-3 Show GitHub Exploit DB Packet Storm
150 - - - GLPI is a free asset and IT management software package. Starting in version 10.0.4 and prior to version 10.0.25, a technician can store an XSS payload in the asset locked tab. Upgrade to 10.0.25 or … New CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output 		CVE-2026-42321 2026-06-4 01:16 2026-06-4 Show GitHub Exploit DB Packet Storm