Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
190601 7.8 重要
Local
DELL EMC (旧 EMC Corporation) - ElanTech Touchpad 用ドライバにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2017-3757 2017-10-2 11:18 2017-08-24 Show GitHub Exploit DB Packet Storm
190602 7.8 重要
Local
マイクロソフト - 複数の Microsoft Excel 製品におけるリモートでコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2017-8744 2017-10-2 11:11 2017-09-12 Show GitHub Exploit DB Packet Storm
190603 7.8 重要
Local
マイクロソフト - 複数の Microsoft 製品におけるリモートでコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2017-8742 2017-10-2 11:11 2017-09-12 Show GitHub Exploit DB Packet Storm
190604 7.8 重要
Local
Lenovo - ThinkPad USB 3.0 イーサネットアダプタードライバにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3746 2017-10-2 11:10 2017-08-24 Show GitHub Exploit DB Packet Storm
190605 7.5 重要
Network
Pki-core Project - pki-core における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2015-0234 2017-10-2 11:10 2015-05-8 Show GitHub Exploit DB Packet Storm
190606 7.8 重要
Local
Hangzhou Hikvision Digital Technology - Hikvision iVMS-4200 における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-13774 2017-10-2 10:07 2017-08-28 Show GitHub Exploit DB Packet Storm
190607 8.8 重要
Network
パルスセキュア - Pulse Connect Secure および Pulse Policy Secure におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-11455 2017-10-2 10:07 2017-08-29 Show GitHub Exploit DB Packet Storm
190608 6.1 警告
Network
Apache Software Foundation - Apache OFBiz におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6800 2017-10-2 10:07 2016-11-29 Show GitHub Exploit DB Packet Storm
190609 8.8 重要
Network
Apache Software Foundation - Apache OFBiz における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2016-4462 2017-10-2 10:07 2016-11-29 Show GitHub Exploit DB Packet Storm
190610 8.8 重要
Network
OpenJPEG project - OpenJPEG におけるバッファエラーの脆弱性 CWE-119
CWE-787
CVE-2017-14164 2017-10-2 09:38 2017-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 7.5 HIGH
Network
- - An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. CWE-749
 Exposed Dangerous Method or Function
CVE-2025-14713 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1292 8.6 HIGH
Network
- - A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. CWE-89
SQL Injection
CVE-2025-30028 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1293 6.1 MEDIUM
Local
- - An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error
CVE-2025-66592 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1294 6.1 MEDIUM
Local
- - An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error
CVE-2025-66593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1295 6.2 MEDIUM
Local
- - A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local attackers to obtain sensitive informatio… CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2026-2237 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1296 8.0 HIGH
Adjacent
- - A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-3012 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1297 4.2 MEDIUM
Network
- - A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote at… CWE-1288
 Improper Validation of Consistency within Input
CVE-2026-9689 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1298 7.1 HIGH
Network
- - A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem wri… CWE-284
Improper Access Control
CVE-2026-1933 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1299 6.8 MEDIUM
Network
- - A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerability by sending an oversized subject_token JSON Web Token (JWT) to the TokenEndpoint. When the token … CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-9704 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1300 6.8 MEDIUM
Network
- - PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an… CWE-89
SQL Injection
CVE-2026-9617 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm