Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190561 9.8 緊急
Network 		ImageMagick - ImageMagick における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-14626 2017-10-11 14:10 2017-09-4 Show GitHub Exploit DB Packet Storm
190562 9.8 緊急
Network 		ImageMagick - ImageMagick における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-14625 2017-10-11 14:10 2017-09-4 Show GitHub Exploit DB Packet Storm
190563 9.8 緊急
Network 		ImageMagick - ImageMagick における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-14624 2017-10-11 14:10 2017-09-4 Show GitHub Exploit DB Packet Storm
190564 8.1 重要
Network 		ImageMagick - ImageMagick における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-14607 2017-10-11 14:10 2017-09-19 Show GitHub Exploit DB Packet Storm
190565 6 警告
Local 		Linux - Linux Kernel における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-12168 2017-10-11 13:47 2017-09-19 Show GitHub Exploit DB Packet Storm
190566 6.1 警告
Network 		Magento, Inc. - Magento E-Commerce Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9758 2017-10-11 11:58 2014-10-21 Show GitHub Exploit DB Packet Storm
190567 6.1 警告
Network 		Joomla! - Joomla! CMS におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2015-5608 2017-10-11 11:53 2015-06-30 Show GitHub Exploit DB Packet Storm
190568 9.8 緊急
Network 		FiberHome Technologies Group - FiberHome User End Routers Bearing Model Number AN1020-25 におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2017-14147 2017-10-11 11:49 2017-09-5 Show GitHub Exploit DB Packet Storm
190569 7.5 重要
Network 		The Document Foundation
libwpd project		 - libwpd および LibreOffice におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-14226 2017-10-11 10:41 2017-09-7 Show GitHub Exploit DB Packet Storm
190570 8.8 重要
Local 		Xen プロジェクト - Xen における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-14319 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1621 8.1 HIGH
Network 		sangoma freepbx FreePBX is an open source IP PBX. Prior to 17.0.8, the FreePBX api module's OAuth2 implementation does not sufficiently validate client credentials during token issuance. Knowledge of a valid client_… CWE-1390
 Weak Authentication 		CVE-2026-44237 2026-06-2 03:42 2026-05-29 Show GitHub Exploit DB Packet Storm
1622 8.8 HIGH
Network 		sangoma freepbx FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administrati… CWE-89
SQL Injection 		CVE-2026-44238 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1623 8.8 HIGH
Network 		sangoma freepbx FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without path sanitization. The $_REQUEST[… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2026-44239 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1624 9.8 CRITICAL
Network 		- - Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search APIs interpolated the user-supplied regConfig parameter directly into the generate… CWE-89
SQL Injection 		CVE-2026-45288 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1625 7.3 HIGH
Network 		- - Better Auth is an authentication and authorization library for TypeScript. Prior to 1.4.17 and 1.5.0-beta.9, Better Auth's HTTP rate limiter keyed each request by the exact textual IP address it rece… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-45364 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1626 4.7 MEDIUM
Network 		- - typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary inconsistency bet… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45366 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1627 8.8 HIGH
Network 		wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a classic shell-metacharacter injection. The YPTSocket notification branch in plugin/Live/on_publish.php builds an execAsyn… CWE-78
OS Command  		CVE-2026-45578 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1628 5.4 MEDIUM
Network 		wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a stored cross-site scripting vulnerability. The Live plugin's "YouTube-style" view renders the live transmission's stream … CWE-79
Cross-site Scripting 		CVE-2026-45580 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1629 6.5 MEDIUM
Network 		n8n-mcp n8n-mcp n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.51.3, the workflow telemetry sanitizer could retain partial fragments of … CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-45582 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1630 6.5 MEDIUM
Network 		wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a cross-site request forgery vulnerability on the 2FA toggle. plugin/LoginControl/set.json.php accepts POST type=set2FA val… CWE-306
CWE-352
Missing Authentication for Critical Function
 Origin Validation Error 		CVE-2026-45610 2026-06-2 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm