Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192041	6.1	警告 Network	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-1327	2017-08-30 16:04	2017-06-1	Show	GitHub Exploit DB Packet Storm

192042	5.4	警告 Network	IBM	-	IBM InfoSphere Master Data Management Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-1199	2017-08-30 16:04	2017-07-27	Show	GitHub Exploit DB Packet Storm

192043	5.5	警告 Local	Motorola Solutions, Inc Comcast	-	Motorola MX011ANM および Xfinity XR11-20 Voice Remote デバイスにおける認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-9498	2017-08-30 14:31	2017-07-30	Show	GitHub Exploit DB Packet Storm

192044	4.6	警告 Physics	Motorola Solutions, Inc	-	Motorola MX011ANM における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-9495	2017-08-30 14:31	2017-07-30	Show	GitHub Exploit DB Packet Storm

192045	5.3	警告 Network	Motorola Solutions, Inc	-	Motorola MX011ANM における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-9494	2017-08-30 14:31	2017-07-30	Show	GitHub Exploit DB Packet Storm

192046	7.8	重要 Local	西日本電信電話株式会社東日本電信電話株式会社	-	「リモートサポートツール（遠隔サポートツール）」のインストーラにおける DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2017-10829	2017-08-30 14:03	2017-08-30	Show	GitHub Exploit DB Packet Storm

192047	9.8	緊急 Network	マイクロソフト	-	Microsoft Edge における現在のユーザのコンテキストで任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-0028	2017-08-30 13:53	2017-01-13	Show	GitHub Exploit DB Packet Storm

192048	9.8	緊急 Network	MEDHOST, Inc.	-	MEDHOST Connex におけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2017-11614	2017-08-30 12:35	2017-07-22	Show	GitHub Exploit DB Packet Storm

192049	8.1	重要 Network	Elixir Plug	-	Elixir Plug における信頼性のないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2017-1000053	2017-08-30 12:35	2017-03-1	Show	GitHub Exploit DB Packet Storm

192050	7.8	重要 Local	Elixir Plug	-	Elixir Plug における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-1000052	2017-08-30 12:35	2017-03-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2661	7.8	HIGH Local	microsoft	windows_admin_center	Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.	CWE-59 Link Following	CVE-2026-42834	2026-05-21 03:29	2026-05-20	Show	GitHub Exploit DB Packet Storm

2662	5.8	MEDIUM Network	-	-	The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attack…	-	CVE-2026-7385	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2663	7.8	HIGH Local	-	-	Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.	CWE-59 Link Following	CVE-2026-41091	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2664	4.8	MEDIUM Network	-	-	CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in the admin role management interface. In a…	CWE-80 CWE-116 Basic XSS Improper Encoding or Escaping of Output	CVE-2026-34246	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2665	7.1	HIGH Network	-	-	libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When compositing an overla…	CWE-125 Out-of-bounds Read	CVE-2026-32882	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2666	6.5	MEDIUM Network	mozilla	firefox thunderbird	Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8961	2026-05-21 02:58	2026-05-19	Show	GitHub Exploit DB Packet Storm

2667	7.5	HIGH Network	mozilla	firefox thunderbird	Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-200 Information Exposure	CVE-2026-8967	2026-05-21 02:57	2026-05-19	Show	GitHub Exploit DB Packet Storm

2668	8.1	HIGH Network	mozilla	firefox thunderbird	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-693 Protection Mechanism Failure	CVE-2026-8962	2026-05-21 02:56	2026-05-19	Show	GitHub Exploit DB Packet Storm

2669	7.5	HIGH Network	mozilla	firefox thunderbird	Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-200 Information Exposure	CVE-2026-8965	2026-05-21 02:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

2670	7.5	HIGH Network	mozilla	firefox thunderbird	Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-200 Information Exposure	CVE-2026-8966	2026-05-21 02:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed