Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
190181	5.3	警告 Network	日立オラクル	-	Oracle Java SE および Java SE Embedded における Serialization に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-10357	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190182	6.2	警告 Local	日立オラクル	-	複数の Oracle Java 製品における Security に関する脆弱性	CWE-200 情報漏えい	CVE-2017-10356	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190183	5.3	警告 Network	日立オラクル	-	複数の Oracle Java 製品における Networking に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-10355	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190184	5.3	警告 Network	日立オラクル	-	Oracle Java SE および Java SE Embedded における JAX-WS に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-10350	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190185	5.3	警告 Network	日立オラクル	-	Oracle Java SE および Java SE Embedded における JAXP に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-10349	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190186	5.3	警告 Network	日立オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-10348	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190187	5.3	警告 Network	日立オラクル	-	Oracle Java SE および JRockit における Serialization に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-10347	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190188	9.6	緊急 Network	日立オラクル	-	Oracle Java SE および Java SE Embedded における Hotspot に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10346	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190189	3.1	低 Network	日立オラクル	-	複数の Oracle Java 製品における Serialization に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-10345	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

190190	4	警告 Network	日立オラクル	-	複数の Oracle Java 製品における Networking に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10295	2017-10-30 13:45	2017-10-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1041	4.9	MEDIUM Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-44917	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

1042	8.1	HIGH Network	openstack	ironic	OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.	CWE-23 Relative Path Traversal	CVE-2026-48681	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

1043	5.9	MEDIUM Local	libexpat_project	libexpat	libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.…	CWE-416 Use After Free	CVE-2026-50219	2026-06-5 03:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

1044	7.5	HIGH Network	solarwinds	web_help_desk	SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-28299	2026-06-5 03:39	2026-06-3	Show	GitHub Exploit DB Packet Storm

1045	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain…	CWE-209 Information Exposure Through an Error Message	CVE-2025-52606	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

1046	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path…	CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute	CVE-2025-52608	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

1047	4.3	MEDIUM Network	mozilla	firefox	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.	CWE-843 Type Confusion	CVE-2026-10702	2026-06-5 03:38	2026-06-3	Show	GitHub Exploit DB Packet Storm

1048	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-125 Out-of-bounds Read	CVE-2026-46344	2026-06-5 03:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

1049	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2026-44518	2026-06-5 03:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

1050	5.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers.	CWE-693 Protection Mechanism Failure	CVE-2025-52609	2026-06-5 03:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed