Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
190391	9.8	緊急 Network	OpenStack Debian	-	OpenStack Swift で使用される Swauth における認証に関する脆弱性	CWE-287 不適切な認証	CVE-2017-16613	2017-12-25 15:39	2017-11-6	Show	GitHub Exploit DB Packet Storm

190392	9.8	緊急 Network	Fiyo CMS	-	Fiyo CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2015-3934	2017-12-25 15:39	2015-06-28	Show	GitHub Exploit DB Packet Storm

190393	9.8	緊急 Network	MIT Kerberos	-	MIT Kerberos 5 におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15088	2017-12-25 15:30	2017-10-18	Show	GitHub Exploit DB Packet Storm

190394	8.4	重要 Local	xrdp Debian	-	xrdp における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-16927	2017-12-25 15:30	2017-12-23	Show	GitHub Exploit DB Packet Storm

190395	7.8	重要 Local	RPM	-	rpm におけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2017-7501	2017-12-25 15:30	2017-09-19	Show	GitHub Exploit DB Packet Storm

190396	7	重要 Local	The Icinga Project	-	Icinga における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-16933	2017-12-25 15:30	2017-11-23	Show	GitHub Exploit DB Packet Storm

190397	7.4	重要 Network	シーメンス	-	Siemens LOGO! デバイスにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-12735	2017-12-25 14:05	2017-08-30	Show	GitHub Exploit DB Packet Storm

190398	6.5	警告 Adjacent	シーメンス	-	Siemens 7KM PAC Switched Ethernet PROFINET 拡張モジュールにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-9945	2017-12-25 13:59	2017-08-30	Show	GitHub Exploit DB Packet Storm

190399	7.8	重要 Local	地方公共団体情報システム機構	-	Windows 版公的個人認証サービス利用者クライアントソフトのインストーラにおける DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2016-4902	2017-12-25 11:26	2016-11-1	Show	GitHub Exploit DB Packet Storm

190400	9.8	緊急 Network	アドビシステムズ	-	Adobe Reader および Acrobat におけるメモリを破損される脆弱性	CWE-119 バッファエラー	CVE-2017-11293	2017-12-25 11:04	2017-11-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3211	5.3	MEDIUM Network	-	-	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log …	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-41178	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

3212	7.1	HIGH Physics	-	-	GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active toke…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-36176	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

3213	6.8	MEDIUM Physics	-	-	An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted str…	CWE-20 CWE-288 Improper Input Validation Authentication Bypass Using an Alternate Path or Channel	CVE-2026-36175	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

3214	9.1	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8644	2026-06-5 01:58	2026-06-2	Show	GitHub Exploit DB Packet Storm

3215	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.	CWE-502 Deserialization of Untrusted Data	CVE-2026-9319	2026-06-5 01:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3216	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.	CWE-94 Code Injection	CVE-2026-9311	2026-06-5 01:53	2026-06-2	Show	GitHub Exploit DB Packet Storm

3217	8.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This could result in remo…	CWE-502 Deserialization of Untrusted Data	CVE-2026-9330	2026-06-5 01:52	2026-06-2	Show	GitHub Exploit DB Packet Storm

3218	5.5	MEDIUM Local	pypa	pip	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed out…	CWE-22 Path Traversal	CVE-2026-8643	2026-06-5 01:52	2026-06-2	Show	GitHub Exploit DB Packet Storm

3219	6.8	MEDIUM Network	nextcloud	nextcloud_server	Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticate…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-45810	2026-06-5 01:51	2026-06-2	Show	GitHub Exploit DB Packet Storm

3220	7.1	HIGH Network	nextcloud	tables	Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in the Tables app allowed a user with access to the …	CWE-89 SQL Injection	CVE-2026-45722	2026-06-5 01:50	2026-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed