Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
190461 9.1 緊急
Network
The Perl Foundation - Perl 5 におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-12883 2017-10-12 17:15 2017-09-10 Show GitHub Exploit DB Packet Storm
190462 7.8 重要
Local
GSTN - GSTN Offline Utility tool における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-13779 2017-10-12 17:15 2017-09-4 Show GitHub Exploit DB Packet Storm
190463 6.7 警告
Local
IBM - IBM Informix Dynamic Server における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-1508 2017-10-12 17:15 2017-09-11 Show GitHub Exploit DB Packet Storm
190464 7.2 重要
Network
LANDesk - Landesk Management Suite における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2014-5362 2017-10-12 16:54 2015-04-16 Show GitHub Exploit DB Packet Storm
190465 7.5 重要
Network
ZTE - ZXR10 1800-2S におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-10931 2017-10-12 16:47 2017-08-10 Show GitHub Exploit DB Packet Storm
190466 9.8 緊急
Network
ZTE - ZXR10 1800-2S におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-10930 2017-10-12 16:47 2017-08-10 Show GitHub Exploit DB Packet Storm
190467 9.1 緊急
Network
LibRaw - LibRaw における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-14608 2017-10-12 16:45 2017-09-13 Show GitHub Exploit DB Packet Storm
190468 9.8 緊急
Network
Peter Szabo - sam2p におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-14631 2017-10-12 16:42 2017-09-28 Show GitHub Exploit DB Packet Storm
190469 9.8 緊急
Network
Peter Szabo - sam2p における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-14630 2017-10-12 16:42 2017-09-28 Show GitHub Exploit DB Packet Storm
190470 7.5 重要
Network
Peter Szabo - sam2p における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-14629 2017-10-12 16:42 2017-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1541 8.3 HIGH
Network
google chrome Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.… CWE-787
 Out-of-bounds Write
CVE-2026-9974 2026-06-2 00:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1542 8.1 HIGH
Network
tassos advanced_custom_fields
convert_forms
engagebox
google_structured_data
mailchimp_auto-subscribe
smile_pack
tassos_code_snippets
tassos_framework
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites. CWE-284
NVD-CWE-noinfo
Improper Access Control
CVE-2026-48906 2026-06-1 23:33 2026-05-27 Show GitHub Exploit DB Packet Storm
1543 7.5 HIGH
Network
ibm websphere_application_server IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, … CWE-400
 Uncontrolled Resource Consumption
CVE-2026-4410 2026-06-1 23:28 2026-05-27 Show GitHub Exploit DB Packet Storm
1544 6.5 MEDIUM
Network
vmware spring_ai Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the int… CWE-22
Path Traversal
CVE-2026-41863 2026-06-1 23:22 2026-05-25 Show GitHub Exploit DB Packet Storm
1545 7.7 HIGH
Network
elastic kibana Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connec… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42398 2026-06-1 23:17 2026-05-29 Show GitHub Exploit DB Packet Storm
1546 6.5 MEDIUM
Network
elastic kibana Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentiall… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42399 2026-06-1 23:14 2026-05-29 Show GitHub Exploit DB Packet Storm
1547 6.5 MEDIUM
Network
elastic kibana Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42400 2026-06-1 23:13 2026-05-29 Show GitHub Exploit DB Packet Storm
1548 7.7 HIGH
Network
elastic kibana Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server t… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-49093 2026-06-1 23:13 2026-05-29 Show GitHub Exploit DB Packet Storm
1549 7.8 HIGH
Local
jetbrains intellij_idea In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-49382 2026-06-1 22:59 2026-05-30 Show GitHub Exploit DB Packet Storm
1550 7.8 HIGH
Local
jetbrains intellij_idea In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion CWE-78
OS Command 
CVE-2026-49366 2026-06-1 22:59 2026-05-30 Show GitHub Exploit DB Packet Storm