Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189961 7.8 重要
Local 		IBM - IBM Security Identity Manager Adapters における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-1362 2017-10-13 13:51 2017-09-21 Show GitHub Exploit DB Packet Storm
189962 2.5 低
Local 		IBM - IBM Business Process Manager における情報漏えいに関する脆弱性 CWE-200
CWE-362
CVE-2017-1346 2017-10-13 13:51 2017-09-30 Show GitHub Exploit DB Packet Storm
189963 6.5 警告
Network 		IBM - IBM WebSphere MQ におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-1235 2017-10-13 13:51 2017-09-20 Show GitHub Exploit DB Packet Storm
189964 7 重要
Local 		Google - Android の Qualcomm ネットワークドライバにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5868 2017-10-13 11:56 2016-12-27 Show GitHub Exploit DB Packet Storm
189965 6.1 警告
Network 		WordPress.org - WordPress の TinyMCE ビジュアルエディタにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14726 2017-10-13 11:55 2017-09-19 Show GitHub Exploit DB Packet Storm
189966 6.1 警告
Network 		WordPress.org - WordPress の oEmbed 探知におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14724 2017-10-13 11:55 2017-09-19 Show GitHub Exploit DB Packet Storm
189967 7.5 重要
Network 		WordPress.org - WordPress の Customizer コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-14722 2017-10-13 11:55 2017-09-19 Show GitHub Exploit DB Packet Storm
189968 6.1 警告
Network 		WordPress.org - WordPress のプラグインエディタにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14721 2017-10-13 11:55 2017-09-19 Show GitHub Exploit DB Packet Storm
189969 6.1 警告
Network 		WordPress.org - WordPress のテンプレートリストの表示におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14720 2017-10-13 11:55 2017-09-19 Show GitHub Exploit DB Packet Storm
189970 7.5 重要
Network 		WordPress.org - WordPress の ZipArchive および PclZip コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-14719 2017-10-13 11:55 2017-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 6.5 MEDIUM
Network 		apache flink_kubernetes_operator Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so th… Update CWE-552
CWE-918
 Files or Directories Accessible to External Parties
Server-Side Request Forgery (SSRF)  		CVE-2026-40564 2026-06-3 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
152 7.5 HIGH
Network 		- - FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0->xapp_id against itself (m… New CWE-617
 Reachable Assertion 		CVE-2026-37233 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
153 7.5 HIGH
Network 		- - FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup returns NULL, triggering assert() in Debug builds (SIG… New CWE-476
 NULL Pointer Dereference 		CVE-2026-37230 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
154 7.5 HIGH
Network 		- - FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in Debug builds (SIGA… New CWE-476
 NULL Pointer Dereference 		CVE-2026-37226 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
155 - - - Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages … New CWE-22
Path Traversal 		CVE-2026-32685 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
156 4.3 MEDIUM
Network 		- - NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in version 2.2.4 in the id parameter of the endpoint `/index.php?route=/queri… New CWE-79
Cross-site Scripting 		CVE-2026-32250 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
157 3.9 LOW
Network 		- - Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate … New CWE-20
 Improper Input Validation  		CVE-2026-30963 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
158 7.8 HIGH
Local 		- - In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional e… New CWE-20
 Improper Input Validation  		CVE-2026-0078 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
159 7.8 HIGH
Local 		google android In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges… New CWE-125
Out-of-bounds Read 		CVE-2026-0076 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
160 7.5 HIGH
Network 		- - A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesyste… New CWE-476
 NULL Pointer Dereference 		CVE-2025-70099 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm