Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190251 7.5 重要
Network 		Node.js Foundation - Node.js におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2015-7384 2017-11-6 16:58 2015-10-6 Show GitHub Exploit DB Packet Storm
190252 5.4 警告
Network 		ATutor - ATutor LMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6521 2017-11-6 16:58 2015-12-31 Show GitHub Exploit DB Packet Storm
190253 5.9 警告
Network 		http.rb project - Ruby http gem における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2015-1828 2017-11-6 16:58 2015-03-24 Show GitHub Exploit DB Packet Storm
190254 9.8 緊急
Network 		Apache Software Foundation - Apache Roller における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2014-0030 2017-11-6 16:58 2014-01-11 Show GitHub Exploit DB Packet Storm
190255 8.8 重要
Network 		Ruckus Wireless, Inc. - Ruckus Wireless Zone Director コントローラのファームウェアにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2017-6223 2017-11-6 16:32 2017-09-29 Show GitHub Exploit DB Packet Storm
190256 5.5 警告
Local 		Sound eXchange - Sound eXchange におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-15372 2017-11-6 16:32 2017-10-10 Show GitHub Exploit DB Packet Storm
190257 5.5 警告
Local 		Sound eXchange - Sound eXchange におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-15371 2017-11-6 16:32 2017-10-11 Show GitHub Exploit DB Packet Storm
190258 5.5 警告
Local 		Sound eXchange - Sound eXchange におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-15370 2017-11-6 16:32 2017-10-10 Show GitHub Exploit DB Packet Storm
190259 7.8 重要
Local 		Irfan Skiljan - PDF プラグインを伴う IrfanView におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-15242 2017-11-6 16:32 2017-10-11 Show GitHub Exploit DB Packet Storm
190260 6.1 警告
Network 		Atlassian - Atlassian FishEye および Crucible におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-14588 2017-11-6 16:32 2017-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1781 4.3 MEDIUM
Network 		- - A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL … CWE-400
CWE-404
 Uncontrolled Resource Consumption
 Improper Resource Shutdown or Release 		CVE-2026-10802 2026-06-5 01:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1782 - - - authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, the SAML source response processor (ResponseProcessor.parse()) does not validate the Conditions element on ass… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-41577 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
1783 - - - authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check rather than proper UR… CWE-601
Open Redirect 		CVE-2026-41569 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
1784 9.3 CRITICAL
Network 		- - authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make the interface more comp… CWE-79
Cross-site Scripting 		CVE-2026-42849 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
1785 8.5 HIGH
Network 		- - authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping when validating upstre… CWE-20
 Improper Input Validation  		CVE-2026-47201 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
1786 8.8 HIGH
Network 		- - authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured… CWE-287
Improper Authentication 		CVE-2026-49443 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
1787 9.8 CRITICAL
Network 		- - authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has been patched in versions … CWE-287
Improper Authentication 		CVE-2026-49448 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
1788 8.0 HIGH
Network 		- - alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, a sandbox escape vulnerability in the alf.io extension script en… CWE-863
 Incorrect Authorization 		CVE-2026-35482 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
1789 7.1 HIGH
Network 		- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.7.6, an Insecure Direct Object Reference (IDOR) vulnerability exists in the API keys mana… CWE-862
 Missing Authorization 		CVE-2026-31942 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
1790 9.6 CRITICAL
Network 		- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR} placeholders aga… CWE-200
Information Exposure 		CVE-2026-32625 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm