Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
191531	9.8	緊急 Network	softechproducts	-	SoftDatepro Dating Social Network における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-15972	2017-11-20 16:44	2017-09-29	Show	GitHub Exploit DB Packet Storm

191532	6.6	警告 Physics	Linux	-	Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-16536	2017-11-20 16:34	2017-09-21	Show	GitHub Exploit DB Packet Storm

191533	6.6	警告 Physics	Linux	-	Linux Kernel における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2017-16535	2017-11-20 16:34	2017-10-19	Show	GitHub Exploit DB Packet Storm

191534	6.6	警告 Physics	Linux	-	Linux Kernel における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2017-16533	2017-11-20 16:34	2017-09-28	Show	GitHub Exploit DB Packet Storm

191535	6.6	警告 Physics	Linux	-	Linux Kernel における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-16532	2017-11-20 16:34	2017-09-29	Show	GitHub Exploit DB Packet Storm

191536	6.6	警告 Physics	Linux	-	Linux Kernel における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2017-16527	2017-11-20 16:34	2017-10-10	Show	GitHub Exploit DB Packet Storm

191537	7.8	重要 Local	Linux	-	Linux Kernel におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-16526	2017-11-20 16:34	2017-09-14	Show	GitHub Exploit DB Packet Storm

191538	7.5	重要 Network	Peter Ohler	-	Ox gem における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-15928	2017-11-20 16:24	2017-10-29	Show	GitHub Exploit DB Packet Storm

191539	7.8	重要 Local	Debian shadowsocks	-	shadowsocks-libev におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2017-15924	2017-11-20 16:23	2017-10-14	Show	GitHub Exploit DB Packet Storm

191540	5.3	警告 Network	Apache Software Foundation	-	Apache Cordova Android における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2015-1835	2017-11-20 16:23	2015-05-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3751	-		-	-	Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access control allows disclosure of password hash. This issue has been patched in versio…	CWE-200 CWE-284 Information Exposure Improper Access Control	CVE-2026-45080	2026-06-3 02:15	2026-06-3	Show	GitHub Exploit DB Packet Storm

3752	7.5	HIGH Network	-	-	NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI …	CWE-200 Information Exposure	CVE-2026-45553	2026-06-3 02:15	2026-06-3	Show	GitHub Exploit DB Packet Storm

3753	5.3	MEDIUM Network	-	-	NiceGUI is a Python-based UI framework. Prior to version 3.12.0, two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may resolve to a directory rathe…	CWE-248 CWE-770 Uncaught Exception Allocation of Resources Without Limits or Throttling	CVE-2026-45554	2026-06-3 02:15	2026-06-3	Show	GitHub Exploit DB Packet Storm

3754	7.5	HIGH Network	-	-	Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1.	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2026-40780	2026-06-3 02:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

3755	7.1	HIGH Network	-	-	Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooComme…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2026-42654	2026-06-3 02:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

3756	8.8	HIGH Network	tanium	connect	Tanium addressed an unauthorized code execution vulnerability in Connect.	CWE-78 OS Command	CVE-2026-9208	2026-06-3 01:29	2026-05-28	Show	GitHub Exploit DB Packet Storm

3757	8.8	HIGH Network	samsung	escargot	Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.	CWE-787 Out-of-bounds Write	CVE-2026-8915	2026-06-3 01:23	2026-05-28	Show	GitHub Exploit DB Packet Storm

3758	8.2	HIGH Network	-	-	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a sho…	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-5260	2026-06-3 01:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

3759	4.3	MEDIUM Network	-	-	Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to …	CWE-476 NULL Pointer Dereference	CVE-2026-45729	2026-06-3 01:16	2026-06-2	Show	GitHub Exploit DB Packet Storm

3760	8.2	HIGH Network	-	-	parse-nested-form-data is a tiny node module for parsing FormData by name into objects and arrays. Prior to version 1.0.1, parseFormData() walks bracket and dot-notation FormData field names into nes…	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2026-45302	2026-06-3 01:16	2026-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed