Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
191381	5.3	警告 Network	日立オラクル	-	複数の Oracle Java 製品における Serialization に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10108	2017-09-20 09:18	2017-07-18	Show	GitHub Exploit DB Packet Storm

191382	5.3	警告 Network	日立オラクル	-	複数の Oracle Java 製品における 2D に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10053	2017-09-20 09:16	2017-07-18	Show	GitHub Exploit DB Packet Storm

191383	5.9	警告 Network	日立オラクル	-	複数の Oracle Java 製品における JCE に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10135	2017-09-20 09:10	2017-07-18	Show	GitHub Exploit DB Packet Storm

191384	6.8	警告 Network	日立オラクル	-	複数の Oracle Java 製品における Security に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10198	2017-09-20 09:08	2017-07-18	Show	GitHub Exploit DB Packet Storm

191385	7.5	重要 Network	日立オラクル	-	複数の Oracle Java 製品における Security に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10176	2017-09-20 09:05	2017-07-18	Show	GitHub Exploit DB Packet Storm

191386	7.5	重要 Network	日立オラクル	-	複数の Oracle Java 製品における JCE に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10118	2017-09-20 09:03	2017-07-18	Show	GitHub Exploit DB Packet Storm

191387	7.5	重要 Network	日立オラクル	-	複数の Oracle Java 製品における JCE に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10115	2017-09-20 09:01	2017-07-18	Show	GitHub Exploit DB Packet Storm

191388	8.1	重要 Network	日立オラクル	-	Oracle Java SE における Scripting に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10078	2017-09-20 08:59	2017-07-18	Show	GitHub Exploit DB Packet Storm

191389	8.3	重要 Network	日立オラクル	-	複数の Oracle Java 製品における Security に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10116	2017-09-20 08:56	2017-07-18	Show	GitHub Exploit DB Packet Storm

191390	9	緊急 Network	日立オラクル	-	Oracle Java SE および Java SE Embedded における RMI に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-10102	2017-09-20 08:52	2017-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2121	5.3	MEDIUM Network	apache	apache-airflow-providers-fab	Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache…	CWE-90 LDAP Injection	CVE-2026-46745	2026-05-28 00:31	2026-05-25	Show	GitHub Exploit DB Packet Storm

2122	9.8	CRITICAL Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH attribute encoder. In src/bgp_protocol.hpp, the IPv4UnicastAnnounce::get_attributes() function computes attr…	CWE-190 Integer Overflow or Wraparound	CVE-2026-48691	2026-05-28 00:29	2026-05-27	Show	GitHub Exploit DB Packet Storm

2123	6.5	MEDIUM Network	struktur	libheif	libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file can trigger an out-of-bounds read in core sequence parsing logic, causing DoS.…	CWE-125 CWE-476 Out-of-bounds Read NULL Pointer Dereference	CVE-2026-41069	2026-05-28 00:26	2026-05-23	Show	GitHub Exploit DB Packet Storm

2124	8.1	HIGH Network	struktur	libheif	libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track's chun…	CWE-125 Out-of-bounds Read	CVE-2026-41071	2026-05-28 00:25	2026-05-23	Show	GitHub Exploit DB Packet Storm

2125	-		-	-	When creating an export through the pretix API, API clients are returned an UUID value for their export job (a long, random string like 35742818-c375-4d15-839f-d49aecce94d6). Using this UUID, the A…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-9712	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2126	6.3	MEDIUM Network	-	-	A vulnerability was found in JeecgBoot up to 3.9.1. Impacted is the function user.getUsername of the file /sys/user/login/setting/userEdit of the component SysUser. The manipulation of the argument u…	CWE-266 CWE-284 Incorrect Privilege Assignment Improper Access Control	CVE-2026-9579	2026-05-28 00:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2127	-		-	-	Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxes/detachall.cgi.	CWE-24 Path Traversal: '../filedir'	CVE-2026-49103	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2128	6.1	MEDIUM Network	-	-	Webmin before 2.640 allows mailboxes/detach.cgi XSS via an SVG document attachment that is viewed in the mailboxes component, because image/svg+xml is used instead of a safe type (e.g., text/plain).	CWE-79 Cross-site Scripting	CVE-2026-49102	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2129	4.7	MEDIUM Network	-	-	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for WooCommerce allows Phishing. This issue affects Facebook for WooCommerce: from n/a through 3.7.0.	CWE-601 Open Redirect	CVE-2026-49059	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2130	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ElementsKit Elementor addon…	CWE-862 Missing Authorization	CVE-2026-49053	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed