Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190321 8.8 重要
Network 		Debian
Canonical		 - Bazaar におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2017-14176 2018-01-5 12:17 2017-09-5 Show GitHub Exploit DB Packet Storm
190322 8.8 重要
Network 		ZKTECO CO., LTD. - ZKTime Web ソフトウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-17056 2018-01-5 12:03 2017-11-30 Show GitHub Exploit DB Packet Storm
190323 9.8 緊急
Network 		Debian - Debian の most パッケージにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2016-1253 2018-01-5 11:59 2016-12-14 Show GitHub Exploit DB Packet Storm
190324 5.9 警告
Network 		Debian - Debian の apt パッケージにおけるチャネルおよびパスのエラーに関する脆弱性 CWE-417
チャネルおよびパスのエラー 		CVE-2016-1252 2018-01-5 11:59 2016-12-13 Show GitHub Exploit DB Packet Storm
190325 7.8 重要
Local 		Flexense Ltd. - Flexense SyncBreeze Enterprise におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-17099 2018-01-5 11:56 2017-10-11 Show GitHub Exploit DB Packet Storm
190326 5.3 警告
Network 		Lenovo - Lenovo XClarity Administrator における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3764 2018-01-5 11:55 2017-11-30 Show GitHub Exploit DB Packet Storm
190327 5.5 警告
Local 		GNU Project - GNU Binutils におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-17080 2018-01-5 11:55 2017-11-16 Show GitHub Exploit DB Packet Storm
190328 7.5 重要
Network 		OpenDaylight Project - OpenDaylight Karaf におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2017-1000406 2018-01-5 11:55 2017-11-28 Show GitHub Exploit DB Packet Storm
190329 9.8 緊急
Network 		Apache Software Foundation - Apache Qpid Broker-J における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-15702 2018-01-5 11:53 2017-11-16 Show GitHub Exploit DB Packet Storm
190330 7.5 重要
Network 		Apache Software Foundation - Apache Qpid Broker-J におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2017-15701 2018-01-5 11:53 2017-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3341 9.0 CRITICAL
Network 		- - Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from the Identity Provider (authenticity) in two SAML flows: the OAut… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-41005 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
3342 8.8 HIGH
Network 		- - A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. An authenticated user with read privileges who is able to … CWE-787
 Out-of-bounds Write 		CVE-2026-11933 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
3343 - - - Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attrib… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-20746 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
3344 6.7 MEDIUM
Local 		- - A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges … CWE-122
Heap-based Buffer Overflow 		CVE-2026-48914 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
3345 - - - A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remedia… CWE-325
 Missing Required Cryptographic Step 		CVE-2026-9266 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
3346 8.7 HIGH
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combined with the bridge's… CWE-693
 Protection Mechanism Failure 		CVE-2026-47135 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
3347 10.0 CRITICAL
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: t… CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-47137 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
3348 8.6 HIGH
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target o… CWE-693
 Protection Mechanism Failure 		CVE-2026-47209 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
3349 8.0 HIGH
Network 		microsoft sharepoint_server Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-285
Improper Authorization 		CVE-2026-47298 2026-06-13 01:00 2026-06-10 Show GitHub Exploit DB Packet Storm
3350 8.8 HIGH
Network 		- - The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operat… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-12059 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm