Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189921 4.3 警告
Network
baserCMSユーザー会 - baserCMS 用プラグイン「メールフォーム」におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4879 2017-11-27 16:28 2016-09-29 Show GitHub Exploit DB Packet Storm
189922 5.4 警告
Network
baserCMSユーザー会 - baserCMS 用プラグイン「メールフォーム」におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4877 2017-11-27 16:27 2016-09-29 Show GitHub Exploit DB Packet Storm
189923 4.3 警告
Network
baserCMSユーザー会 - baserCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4876 2017-11-27 16:27 2016-09-29 Show GitHub Exploit DB Packet Storm
189924 2
Adjacent
バッファロー - WNC01WH におけるコマンドの処理に起因するディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-7825 2017-11-27 16:24 2016-12-2 Show GitHub Exploit DB Packet Storm
189925 6.8 警告
Adjacent
バッファロー - WNC01WH におけるデバッグオプションを有効化される脆弱性 CWE-Other
その他
CVE-2016-7824 2017-11-27 16:24 2016-12-2 Show GitHub Exploit DB Packet Storm
189926 4.3 警告
Adjacent
バッファロー - WNC01WH におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-7823 2017-11-27 16:24 2016-12-2 Show GitHub Exploit DB Packet Storm
189927 7.1 重要
Network
バッファロー - WNC01WH におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-7822 2017-11-27 16:24 2016-12-2 Show GitHub Exploit DB Packet Storm
189928 6.5 警告
Network
バッファロー - WNC01WH におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-7821 2017-11-27 16:24 2016-12-2 Show GitHub Exploit DB Packet Storm
189929 9.8 緊急
Network
osTicket - osTicket における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2017-15580 2017-11-27 15:25 2017-10-18 Show GitHub Exploit DB Packet Storm
189930 7.5 重要
Network
Open Information Security Foundation - Suricata におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2017-15377 2017-11-27 15:25 2017-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 5.5 MEDIUM
Local
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could re… CWE-22
Path Traversal
CVE-2026-34657 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
982 7.5 HIGH
Network
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the ap… CWE-190
 Integer Overflow or Wraparound
CVE-2026-34711 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
983 7.5 HIGH
Network
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the applica… CWE-20
 Improper Input Validation 
CVE-2026-34712 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
984 7.5 HIGH
Network
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34713 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
985 6.2 MEDIUM
Local
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-47902 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
986 6.2 MEDIUM
Local
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the applica… CWE-20
 Improper Input Validation 
CVE-2026-47903 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
987 6.2 MEDIUM
Local
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-47904 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
988 6.2 MEDIUM
Local
- - CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-47905 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm
989 7.3 HIGH
Local
- - OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2.245.0 (2.246.0 on Windows) might allow an actor who controls the value of one or more bundling properties (e… CWE-78
OS Command 
CVE-2026-11417 2026-06-11 03:35 2026-06-11 Show GitHub Exploit DB Packet Storm
990 6.4 MEDIUM
Network
- - The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the multiple parameters in all v… CWE-79
Cross-site Scripting
CVE-2025-8444 2026-06-11 03:35 2026-06-10 Show GitHub Exploit DB Packet Storm