Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
190441	6.3	警告 Network	日本情報化農業研究所	-	SOY CMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-2163	2017-11-27 17:19	2017-05-11	Show	GitHub Exploit DB Packet Storm

190442	6.1	警告 Network	日本情報化農業研究所	-	SOY CMS のインストーラにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2164	2017-11-27 17:18	2017-05-11	Show	GitHub Exploit DB Packet Storm

190443	7.8	重要 Local	地方公共団体情報システム機構	-	Windows 版公的個人認証サービス利用者クライアントソフトのインストーラにおける DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2017-2157	2017-11-27 17:13	2017-05-9	Show	GitHub Exploit DB Packet Storm

190444	6.5	警告 Network	サイボウズ	-	サイボウズデヂエにおける DBM ファイルの削除に関するアクセス制限不備	CWE-264 認可・権限・アクセス制御	CVE-2016-7833	2017-11-27 17:09	2016-12-12	Show	GitHub Exploit DB Packet Storm

190445	5.3	警告 Network	サイボウズ	-	サイボウズデヂエにおける DBM ファイルの取得に関するアクセス制限不備	CWE-264 認可・権限・アクセス制御	CVE-2016-7832	2017-11-27 17:09	2016-12-12	Show	GitHub Exploit DB Packet Storm

190446	6.1	警告 Adjacent	バッファロー	-	WNC01WH における POST リクエストの処理に起因するディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-7826	2017-11-27 17:09	2016-12-2	Show	GitHub Exploit DB Packet Storm

190447	6.3	警告 Network	サイボウズ	-	サイボウズガルーンにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-7803	2017-11-27 17:09	2016-12-19	Show	GitHub Exploit DB Packet Storm

190448	6.5	警告 Network	サイボウズ	-	サイボウズガルーンにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-7802	2017-11-27 17:09	2016-12-19	Show	GitHub Exploit DB Packet Storm

190449	5	警告 Adjacent	東芝	-	FlashAir におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-4863	2017-11-27 17:02	2016-09-27	Show	GitHub Exploit DB Packet Storm

190450	6.1	警告 Network	BestWebSoft	-	複数の BestWebSoft 製 WordPress 用プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2171	2017-11-27 17:02	2017-05-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2801	4.9	MEDIUM Network	acer	connect_m6e_5g_firmware	The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall limits, making internal API endpoints reachable over the WAN.	CWE-200 Information Exposure	CVE-2026-50224	2026-06-8 21:58	2026-06-4	Show	GitHub Exploit DB Packet Storm

2802	9.1	CRITICAL Network	acer	connect_m6e_5g_firmware	The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems to flood the database.	CWE-306 Missing Authentication for Critical Function	CVE-2026-50225	2026-06-8 21:58	2026-06-4	Show	GitHub Exploit DB Packet Storm

2803	5.3	MEDIUM Network	acer	connect_m6e_5g_firmware	Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extra…	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-50226	2026-06-8 21:57	2026-06-4	Show	GitHub Exploit DB Packet Storm

2804	9.8	CRITICAL Network	acer	connect_m6e_5g_firmware	The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-50214	2026-06-8 21:56	2026-06-4	Show	GitHub Exploit DB Packet Storm

2805	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-56123	2026-06-8 19:16	2026-06-8	Show	GitHub Exploit DB Packet Storm

2806	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-56122	2026-06-8 19:16	2026-06-8	Show	GitHub Exploit DB Packet Storm

2807	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-56121	2026-06-8 19:16	2026-06-8	Show	GitHub Exploit DB Packet Storm

2808	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-56120	2026-06-8 19:16	2026-06-8	Show	GitHub Exploit DB Packet Storm

2809	-		-	-	Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.	-	CVE-2026-36229	2026-06-7 06:16	2026-06-7	Show	GitHub Exploit DB Packet Storm

2810	6.5	MEDIUM Network	-	-	A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. T…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-36499	2026-06-7 05:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed