Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190101 6 警告
Local 		Linux - Linux Kernel における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-12168 2017-10-11 13:47 2017-09-19 Show GitHub Exploit DB Packet Storm
190102 6.1 警告
Network 		Magento, Inc. - Magento E-Commerce Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9758 2017-10-11 11:58 2014-10-21 Show GitHub Exploit DB Packet Storm
190103 6.1 警告
Network 		Joomla! - Joomla! CMS におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2015-5608 2017-10-11 11:53 2015-06-30 Show GitHub Exploit DB Packet Storm
190104 9.8 緊急
Network 		FiberHome Technologies Group - FiberHome User End Routers Bearing Model Number AN1020-25 におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2017-14147 2017-10-11 11:49 2017-09-5 Show GitHub Exploit DB Packet Storm
190105 7.5 重要
Network 		The Document Foundation
libwpd project		 - libwpd および LibreOffice におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-14226 2017-10-11 10:41 2017-09-7 Show GitHub Exploit DB Packet Storm
190106 8.8 重要
Local 		Xen プロジェクト - Xen における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-14319 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190107 6.5 警告
Local 		Xen プロジェクト - Xen における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-14318 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190108 5.6 警告
Local 		Xen プロジェクト - Xen における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2017-14317 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190109 8.8 重要
Local 		Xen プロジェクト - Xen における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-14316 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190110 9.8 緊急
Network 		UserDashboard project - Drupal 用 User Dashboard モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-7877 2017-10-11 10:30 2015-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 4.3 MEDIUM
Network 		jenkins job_import Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of cred… Update CWE-269
 Improper Privilege Management 		CVE-2026-48926 2026-06-2 23:49 2026-05-28 Show GitHub Exploit DB Packet Storm
202 8.8 HIGH
Network 		- - CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.… New CWE-20
 Improper Input Validation  		CVE-2026-7195 2026-06-2 23:48 2026-06-2 Show GitHub Exploit DB Packet Storm
203 2.5 LOW
Local 		mintplexlabs anythingllm AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the AnythingLLM agent filesystem copy tool validates only … Update CWE-59
Link Following 		CVE-2026-45403 2026-06-2 23:48 2026-05-29 Show GitHub Exploit DB Packet Storm
204 8.6 HIGH
Network 		- - An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The functions fill_RRU_PrbTotDl() and fill_RRU_PrbTotUl() in open… New CWE-369
 Divide By Zero 		CVE-2026-37232 2026-06-2 23:47 2026-06-2 Show GitHub Exploit DB Packet Storm
205 - - - An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments configured with LdapAuth.mixedAuth=true and Security.require_otp=t… New CWE-287
Improper Authentication 		CVE-2026-10611 2026-06-2 23:47 2026-06-2 Show GitHub Exploit DB Packet Storm
206 - - - A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST… New - CVE-2026-35717 2026-06-2 23:47 2026-06-2 Show GitHub Exploit DB Packet Storm
207 - - - Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during… New - CVE-2026-10621 2026-06-2 23:46 2026-06-2 Show GitHub Exploit DB Packet Storm
208 - - - Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints. New - CVE-2026-10622 2026-06-2 23:46 2026-06-2 Show GitHub Exploit DB Packet Storm
209 7.5 HIGH
Network 		- - Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that allows unauthenticated attackers to… New CWE-22
Path Traversal 		CVE-2026-49136 2026-06-2 23:45 2026-06-2 Show GitHub Exploit DB Packet Storm
210 8.2 HIGH
Network 		- - Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categor… New CWE-89
SQL Injection 		CVE-2018-25433 2026-06-2 23:45 2026-06-2 Show GitHub Exploit DB Packet Storm