Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192101 9.8 緊急
Network 		NicePHPScripts.com - Job Board Script ソフトウェアにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-15964 2017-11-24 11:13 2017-09-11 Show GitHub Exploit DB Packet Storm
192102 8.8 重要
Network 		Ingenious School Management System project - Ingenious School Management System における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2017-15957 2017-11-24 11:13 2017-09-29 Show GitHub Exploit DB Packet Storm
192103 5.3 警告
Network 		シスコシステムズ - Cisco WebEx Meetings Server における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-12295 2017-11-22 17:44 2017-11-1 Show GitHub Exploit DB Packet Storm
192104 5.4 警告
Network 		シスコシステムズ - Cisco WebEx Meetings Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12294 2017-11-22 17:44 2017-11-1 Show GitHub Exploit DB Packet Storm
192105 7.5 重要
Network 		lemonadeflirt - ConverTo Video Downloader & Converter における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-15956 2017-11-22 17:33 2017-09-29 Show GitHub Exploit DB Packet Storm
192106 5.5 警告
Local 		Linux - Linux kernel におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2006-5331 2017-11-22 17:33 2006-11-29 Show GitHub Exploit DB Packet Storm
192107 9.8 緊急
Network 		iKodes Technology - iProject Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-15961 2017-11-22 17:27 2017-09-29 Show GitHub Exploit DB Packet Storm
192108 9.8 緊急
Network 		Your Articles Directory - Article Directory Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-15960 2017-11-22 17:16 2017-09-29 Show GitHub Exploit DB Packet Storm
192109 9.8 緊急
Network 		DomainZaar.com - D-Park Pro Domain Parking Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-15958 2017-11-22 17:16 2017-09-29 Show GitHub Exploit DB Packet Storm
192110 5.9 警告
Network 		マカフィー - McAfee Network Data Loss Prevention における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3934 2017-11-22 17:15 2017-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
781 7.4 HIGH
Network 		deno deno Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrime(candidate[, options][, callback]) and crypto.checkPrimeSync(candidate[, options]) ran no Miller-Rabin… CWE-325
 Missing Required Cryptographic Step 		CVE-2026-49440 2026-06-27 04:27 2026-06-24 Show GitHub Exploit DB Packet Storm
782 8.1 HIGH
Network 		caddyserver caddy Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the exact client-supplied identity header before copying the trusted value from the… CWE-287
CWE-290
CWE-444
Improper Authentication
 Authentication Bypass by Spoofing
HTTP Request Smuggling 		CVE-2026-52845 2026-06-27 04:27 2026-06-24 Show GitHub Exploit DB Packet Storm
783 6.5 MEDIUM
Network 		aquasec trivy Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a… CWE-770
CWE-789
 Allocation of Resources Without Limits or Throttling
 Memory Allocation with Excessive Size Value 		CVE-2026-54448 2026-06-27 04:27 2026-06-26 Show GitHub Exploit DB Packet Storm
784 7.5 HIGH
Network 		rubyconcurrency concurrent_ruby concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN. The issue is cau… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-54904 2026-06-27 04:26 2026-06-25 Show GitHub Exploit DB Packet Storm
785 5.3 MEDIUM
Network 		encode starlette Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating… CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2026-54282 2026-06-27 04:18 2026-06-23 Show GitHub Exploit DB Packet Storm
786 7.5 HIGH
Network 		encode starlette Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These limits are … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-54283 2026-06-27 04:16 2026-06-23 Show GitHub Exploit DB Packet Storm
787 - - - Outline is a service that allows for collaborative documentation. Prior to 1.8.0, the AuthenticationHelper.canAccess function uses ctx.originalUrl to verify if an API key or OAuth token has the requi… CWE-863
 Incorrect Authorization 		CVE-2026-54573 2026-06-27 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
788 2.2 LOW
Local 		- - Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi stored API keys and OAuth credentials in auth.json. A race condition in the file write path could briefly create or rewrite this … CWE-367
CWE-732
 Time-of-check Time-of-use (TOCTOU) Race Condition
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-54327 2026-06-27 04:16 2026-06-24 Show GitHub Exploit DB Packet Storm
789 5.8 MEDIUM
Local 		- - K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a path traversal vulnerability exists in K3s's etcd snapshot decompression functi… CWE-22
Path Traversal 		CVE-2026-54250 2026-06-27 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
790 7.5 HIGH
Network 		- - File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, File Browser's public share handlers rebase t… CWE-863
 Incorrect Authorization 		CVE-2026-54091 2026-06-27 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm