Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191301 7.8 重要
Local 		Apache Software Foundation - Apache XML-RPC ライブラリにおける XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2016-5002 2017-11-16 16:15 2016-07-12 Show GitHub Exploit DB Packet Storm
191302 9.8 緊急
Network 		Apache Software Foundation - Apache OFBiz における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1622 2017-11-16 16:15 2012-04-15 Show GitHub Exploit DB Packet Storm
191303 8.1 重要
Network 		DELL EMC (旧 EMC Corporation) - EMC NetWorker におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-8022 2017-11-16 15:55 2017-10-16 Show GitHub Exploit DB Packet Storm
191304 5.4 警告
Network 		Pootlepress - WordPress 用 Pootle Button プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-15811 2017-11-16 15:55 2017-10-13 Show GitHub Exploit DB Packet Storm
191305 6.1 警告
Network 		PopCash Network - WordPress 用 PopCash.Net Code Integration Tool プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-15810 2017-11-16 15:55 2017-10-12 Show GitHub Exploit DB Packet Storm
191306 7.4 重要
Local 		IKARUS Security Software GmbH - IKARUS Anti Virus における HTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2017-15643 2017-11-16 15:55 2017-10-16 Show GitHub Exploit DB Packet Storm
191307 7.8 重要
Local 		Morpho - MorphoSmart 1300 シリーズにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-15567 2017-11-16 15:55 2017-10-23 Show GitHub Exploit DB Packet Storm
191308 7.8 重要
Local 		Cumulus Networks - Cumulus Linux における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5699 2017-11-16 15:55 2015-08-11 Show GitHub Exploit DB Packet Storm
191309 6.5 警告
Network 		OpenJPEG project - OpenJPEG における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2015-1239 2017-11-16 15:28 2014-02-11 Show GitHub Exploit DB Packet Storm
191310 4.7 警告
Local 		PCU - エアバッグコントロールユニットにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2017-14937 2017-11-16 15:06 2017-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3491 4.3 MEDIUM
Network 		- - A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component … CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-10215 2026-06-4 04:16 2026-06-1 Show GitHub Exploit DB Packet Storm
3492 8.8 HIGH
Network 		- - A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetProtocolFilter of the file /goform/formSetProtocolFilter. Such manipulation of the argument protocol_na… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-10122 2026-06-4 04:16 2026-05-31 Show GitHub Exploit DB Packet Storm
3493 4.3 MEDIUM
Network 		- - A vulnerability was identified in Open5GS up to 2.7.7. This affects an unknown part in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. Such manipulation leads to denial … CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-10115 2026-06-4 04:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3494 7.5 HIGH
Network 		oracle database_server Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with n… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46835 2026-06-4 04:00 2026-05-29 Show GitHub Exploit DB Packet Storm
3495 7.5 HIGH
Network 		oracle database_server Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with n… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46834 2026-06-4 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
3496 9.9 CRITICAL
Network 		linuxfoundation cloudnativepg CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as t… CWE-250
CWE-271
CWE-426
 Execution with Unnecessary Privileges
 Privilege Dropping / Lowering Errors
 Untrusted Search Path 		CVE-2026-44477 2026-06-4 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
3497 8.0 HIGH
Network 		microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-78
OS Command  		CVE-2026-47294 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
3498 6.3 MEDIUM
Network 		vivotek fd8136_firmware A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST… CWE-121
Stack-based Buffer Overflow 		CVE-2026-35717 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
3499 7.3 HIGH
Network 		vivotek fd8136_firmware Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component CWE-121
Stack-based Buffer Overflow 		CVE-2026-30649 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
3500 8.8 HIGH
Network 		vivotek fd8136_firmware A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-03… CWE-120
Classic Buffer Overflow 		CVE-2026-30650 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm