Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190621 8.8 重要
Network 		Simple DirectMedia Layer - SDL_image におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-2887 2017-11-13 11:14 2017-10-10 Show GitHub Exploit DB Packet Storm
190622 9.8 緊急
Network 		RubyGems - RubyGems における信頼性のないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2017-0903 2017-11-13 09:55 2017-10-9 Show GitHub Exploit DB Packet Storm
190623 7.1 重要
Local 		X.Org Foundation - libXfont における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-13722 2017-11-10 19:11 2017-07-20 Show GitHub Exploit DB Packet Storm
190624 7.1 重要
Local 		X.Org Foundation - libXfont における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-13720 2017-11-10 19:11 2017-07-20 Show GitHub Exploit DB Packet Storm
190625 7.8 重要
Local 		FreeBSD - FreeBSD における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5675 2017-11-10 18:37 2015-08-25 Show GitHub Exploit DB Packet Storm
190626 4.2 警告
Adjacent 		シマンテック - Symantec Encryption Desktop におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2017-13679 2017-11-10 18:30 2017-10-9 Show GitHub Exploit DB Packet Storm
190627 4.2 警告
Adjacent 		シマンテック - Symantec Endpoint Encryption におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2017-13675 2017-11-10 18:30 2017-10-9 Show GitHub Exploit DB Packet Storm
190628 6.5 警告
Network 		Apache Software Foundation - Apache NiFi における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2017-12623 2017-11-10 18:21 2017-10-2 Show GitHub Exploit DB Packet Storm
190629 9.8 緊急
Network 		セイコーエプソン株式会社 - Epson EasyMP のソフトウェアにおける証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-12861 2017-11-10 18:07 2017-09-19 Show GitHub Exploit DB Packet Storm
190630 9.8 緊急
Network 		セイコーエプソン株式会社 - Epson EasyMP のソフトウェアにおける証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-12860 2017-11-10 18:07 2017-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2611 5.3 MEDIUM
Network 		djangoproject django An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip leading or trailing whitespace from `Vary` response header va… CWE-1023
 Incomplete Comparison with Missing Factors 		CVE-2026-48587 2026-06-5 22:03 2026-06-3 Show GitHub Exploit DB Packet Storm
2612 4.3 MEDIUM
Network 		djangoproject django An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.http.HttpRequest.get_signed_cookie` in Django uses a non-injective salt derivation (concatenating the cookie name and… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-6873 2026-06-5 21:58 2026-06-3 Show GitHub Exploit DB Packet Storm
2613 3.1 LOW
Network 		djangoproject django An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend` in Django fails to prevent reuse of a partially-initialized connection after a … CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-7666 2026-06-5 21:46 2026-06-3 Show GitHub Exploit DB Packet Storm
2614 5.3 MEDIUM
Network 		djangoproject django An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match `Cache-Control` response directives case-insensitive… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-8404 2026-06-5 21:38 2026-06-3 Show GitHub Exploit DB Packet Storm
2615 5.3 MEDIUM
Network 		exim exim Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client. CWE-839
 Numeric Range Comparison Without Minimum Check 		CVE-2026-48840 2026-06-5 20:16 2026-05-30 Show GitHub Exploit DB Packet Storm
2616 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid,… CWE-20
 Improper Input Validation  		CVE-2026-46243 2026-06-5 16:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2617 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_l… - CVE-2026-46242 2026-06-5 16:16 2026-05-30 Show GitHub Exploit DB Packet Storm
2618 3.3 LOW
Local 		- - HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized access and may lead to information exposure. - CVE-2025-62338 2026-06-5 14:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2619 4.1 MEDIUM
Network 		- - Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page CWE-79
Cross-site Scripting 		CVE-2026-37700 2026-06-5 11:17 2026-06-4 Show GitHub Exploit DB Packet Storm
2620 8.1 HIGH
Adjacent 		- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabl… CWE-306
Missing Authentication for Critical Function 		CVE-2026-36603 2026-06-5 11:17 2026-06-4 Show GitHub Exploit DB Packet Storm