Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189861 9.8 緊急
Network 		Multi-Tech Systems, Inc. - MultiTech FaxFinder における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-10512 2017-10-24 11:50 2016-11-21 Show GitHub Exploit DB Packet Storm
189862 9.8 緊急
Network 		Apache Software Foundation - Apache Commons Jelly における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2017-12621 2017-10-24 11:42 2017-08-29 Show GitHub Exploit DB Packet Storm
189863 9.8 緊急
Network 		OpenText - OpenText Document Sciences xPression における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2017-14759 2017-10-24 11:41 2017-09-27 Show GitHub Exploit DB Packet Storm
189864 8.8 重要
Network 		OpenText - OpenText Document Sciences xPression における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-14758 2017-10-24 11:41 2017-09-27 Show GitHub Exploit DB Packet Storm
189865 8.8 重要
Network 		OpenText - OpenText Document Sciences xPression における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-14757 2017-10-24 11:41 2017-09-27 Show GitHub Exploit DB Packet Storm
189866 6.1 警告
Network 		OpenText - OpenText Document Sciences xPression におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14756 2017-10-24 11:41 2017-09-27 Show GitHub Exploit DB Packet Storm
189867 6.1 警告
Network 		OpenText - OpenText Document Sciences xPression におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14755 2017-10-24 11:41 2017-09-27 Show GitHub Exploit DB Packet Storm
189868 6.5 警告
Network 		OpenText - OpenText Document Sciences xPression におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-14754 2017-10-24 11:41 2017-09-27 Show GitHub Exploit DB Packet Storm
189869 5.4 警告
Network 		ATutor - ATutor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14981 2017-10-24 11:28 2017-10-6 Show GitHub Exploit DB Packet Storm
189870 7.8 重要
Local 		Skybox Security - Skybox Manager Client Application における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-14773 2017-10-24 11:28 2017-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
101 5.9 MEDIUM
Network 		- - FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser. In src/simple_packet_parser_ng.cpp, after validating that the packet contains at least sizeof(ipv4… New CWE-125
Out-of-bounds Read 		CVE-2026-48682 2026-06-5 01:28 2026-06-3 Show GitHub Exploit DB Packet Storm
102 7.5 HIGH
Network 		- - An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-37462 2026-06-5 01:28 2026-06-4 Show GitHub Exploit DB Packet Storm
103 6.3 MEDIUM
Network 		- - A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI mo… New CWE-79
Cross-site Scripting 		CVE-2026-39107 2026-06-5 01:28 2026-06-4 Show GitHub Exploit DB Packet Storm
104 - - - GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack. New - CVE-2026-36182 2026-06-5 01:28 2026-06-5 Show GitHub Exploit DB Packet Storm
105 - - - bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service. New - CVE-2026-38570 2026-06-5 01:28 2026-06-5 Show GitHub Exploit DB Packet Storm
106 9.8 CRITICAL
Network 		- - CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values. New CWE-113
HTTP Response Splitting 		CVE-2026-38967 2026-06-5 01:26 2026-06-3 Show GitHub Exploit DB Packet Storm
107 9.8 CRITICAL
Network 		- - An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request. New CWE-78
OS Command  		CVE-2026-36576 2026-06-5 01:26 2026-06-4 Show GitHub Exploit DB Packet Storm
108 - - - Dovestones Softwares ADPhonebook before v4.0.1.1 is vulnerable to a Cross Site Scripting vulnerability. The /Admin/Save API allows an authenticated admin user to store malicious JavaScript payloads i… New - CVE-2026-36460 2026-06-5 01:26 2026-06-4 Show GitHub Exploit DB Packet Storm
109 6.1 MEDIUM
Network 		- - Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS. New CWE-79
Cross-site Scripting 		CVE-2026-33553 2026-06-5 01:25 2026-06-3 Show GitHub Exploit DB Packet Storm
110 5.4 MEDIUM
Network 		- - LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG pa… New CWE-436
 Interpretation Conflict 		CVE-2026-40930 2026-06-5 01:23 2026-06-5 Show GitHub Exploit DB Packet Storm