Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
190691	7.5	重要 Network	ジュニパーネットワークス	-	Juniper Networks Junos OS におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2017-10608	2017-11-9 18:00	2017-10-11	Show	GitHub Exploit DB Packet Storm

190692	7.5	重要 Network	ジュニパーネットワークス	-	Juniper Networks Junos OS におけるリソース管理に関する脆弱性	CWE-399 リソース管理の問題	CVE-2017-10607	2017-11-9 18:00	2017-10-11	Show	GitHub Exploit DB Packet Storm

190693	4.4	警告 Local	ジュニパーネットワークス	-	Juniper Networks TPM ファームウェアにおける暗号に関する脆弱性	CWE-310 暗号の問題	CVE-2017-10606	2017-11-9 18:00	2017-10-11	Show	GitHub Exploit DB Packet Storm

190694	5.5	警告 Local	ジュニパーネットワークス	-	Juniper Networks Junos OS におけるパーミッションに関する脆弱性	CWE-275 パーミッションの問題	CVE-2016-4924	2017-11-9 18:00	2016-10-12	Show	GitHub Exploit DB Packet Storm

190695	6.1	警告 Network	ジュニパーネットワークス	-	Juniper Networks Junos OS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4923	2017-11-9 18:00	2016-10-12	Show	GitHub Exploit DB Packet Storm

190696	8.8	重要 Network	Atlassian	-	Bamboo におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-9514	2017-11-9 17:58	2017-10-11	Show	GitHub Exploit DB Packet Storm

190697	8.8	重要 Network	Qualiteam Software Limited	-	X-Cart における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-15285	2017-11-9 17:57	2017-10-12	Show	GitHub Exploit DB Packet Storm

190698	7.1	重要 Network	Huawei	-	複数の Huawei FusionServer におけるパーミッションに関する脆弱性	CWE-275 パーミッションの問題	CVE-2015-7842	2017-11-9 17:15	2015-09-23	Show	GitHub Exploit DB Packet Storm

190699	9.8	緊急 Network	mpfr	-	GNU MPFR におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2014-9474	2017-11-9 17:15	2014-12-4	Show	GitHub Exploit DB Packet Storm

190700	6.1	警告 Network	シスコシステムズ	-	Cisco WebEx Meeting Center におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-12298	2017-11-9 17:15	2017-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2611	5.3	MEDIUM Network	djangoproject	django	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip leading or trailing whitespace from `Vary` response header va…	CWE-1023 Incomplete Comparison with Missing Factors	CVE-2026-48587	2026-06-5 22:03	2026-06-3	Show	GitHub Exploit DB Packet Storm

2612	4.3	MEDIUM Network	djangoproject	django	An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.http.HttpRequest.get_signed_cookie` in Django uses a non-injective salt derivation (concatenating the cookie name and…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-6873	2026-06-5 21:58	2026-06-3	Show	GitHub Exploit DB Packet Storm

2613	3.1	LOW Network	djangoproject	django	An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend` in Django fails to prevent reuse of a partially-initialized connection after a …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2026-7666	2026-06-5 21:46	2026-06-3	Show	GitHub Exploit DB Packet Storm

2614	5.3	MEDIUM Network	djangoproject	django	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match `Cache-Control` response directives case-insensitive…	CWE-178 Improper Handling of Case Sensitivity	CVE-2026-8404	2026-06-5 21:38	2026-06-3	Show	GitHub Exploit DB Packet Storm

2615	5.3	MEDIUM Network	exim	exim	Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.	CWE-839 Numeric Range Comparison Without Minimum Check	CVE-2026-48840	2026-06-5 20:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

2616	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid,…	CWE-20 Improper Input Validation	CVE-2026-46243	2026-06-5 16:16	2026-06-2	Show	GitHub Exploit DB Packet Storm

2617	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_l…	-	CVE-2026-46242	2026-06-5 16:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

2618	3.3	LOW Local	-	-	HCL BigFix Cloud Lifecycle Management is affected by lack of input validation. This low-level flaw allows unauthorized access and may lead to information exposure.	-	CVE-2025-62338	2026-06-5 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

2619	4.1	MEDIUM Network	-	-	Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page	CWE-79 Cross-site Scripting	CVE-2026-37700	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

2620	8.1	HIGH Adjacent	-	-	Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabl…	CWE-306 Missing Authentication for Critical Function	CVE-2026-36603	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed