Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192251 9.8 緊急
Network
UNIT4 - Unit4 Polska TETA Web におけるセッションの固定化の脆弱性 CWE-384
セッションの固定化
CVE-2015-1174 2017-09-1 11:19 2015-01-8 Show GitHub Exploit DB Packet Storm
192252 7.8 重要
Local
GNU Project - GNU Binutils における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-12459 2017-09-1 10:49 2017-07-27 Show GitHub Exploit DB Packet Storm
192253 7.8 重要
Local
GNU Project - GNU Binutils における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-12458 2017-09-1 10:49 2017-07-27 Show GitHub Exploit DB Packet Storm
192254 7.8 重要
Local
GNU Project - GNU Binutils における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-12457 2017-09-1 10:49 2017-07-27 Show GitHub Exploit DB Packet Storm
192255 7.8 重要
Local
GNU Project - GNU Binutils における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-12456 2017-09-1 10:49 2017-07-24 Show GitHub Exploit DB Packet Storm
192256 7.8 重要
Local
GNU Project - GNU Binutils における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-12455 2017-09-1 10:49 2017-07-27 Show GitHub Exploit DB Packet Storm
192257 7.8 重要
Local
GNU Project - GNU Binutils における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-12454 2017-09-1 10:49 2017-07-24 Show GitHub Exploit DB Packet Storm
192258 7.8 重要
Local
GNU Project - GNU Binutils における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-12453 2017-09-1 10:49 2017-07-24 Show GitHub Exploit DB Packet Storm
192259 7.8 重要
Local
GNU Project - GNU Binutils における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-12452 2017-09-1 10:49 2017-07-24 Show GitHub Exploit DB Packet Storm
192260 7.8 重要
Local
GNU Project - GNU Binutils における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-12451 2017-09-1 10:49 2017-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2811 7.3 HIGH
Network
- - A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the component Student M… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-9517 2026-05-26 09:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2812 5.4 MEDIUM
Network
webmin webmin Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attack… CWE-79
Cross-site Scripting
CVE-2026-22678 2026-05-26 09:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2813 - - - An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's path is passed as a URI in an org.freedesktop.FileManager1.ShowFolders D-Bus method call, PCManFM-Qt d… CWE-913
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-48700 2026-05-25 05:16 2026-05-23 Show GitHub Exploit DB Packet Storm
2814 - - - In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinne… - CVE-2026-43494 2026-05-23 21:17 2026-05-21 Show GitHub Exploit DB Packet Storm
2815 8.1 HIGH
Network
- - shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character using `/(.)/g`, which … CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-9277 2026-05-23 13:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2816 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the redirection page (retrieved from the request's Referer header) allows an attacker… CWE-79
Cross-site Scripting
CVE-2026-40598 2026-05-23 13:16 2026-05-23 Show GitHub Exploit DB Packet Storm
2817 6.5 MEDIUM
Network
- - TypeBot is a chatbot builder tool. In versions 3.16.0 and prior, the WhatsApp Cloud API webhook endpoint (POST /v1/workspaces/{workspaceId}/whatsapp/{credentialsId}/webhook) does not verify the x-hub… CWE-287
CWE-345
Improper Authentication
 Insufficient Verification of Data Authenticity
CVE-2026-39969 2026-05-23 13:16 2026-05-23 Show GitHub Exploit DB Packet Storm
2818 5.4 MEDIUM
Network
- - TypeBot is a chatbot builder tool. In versions prior to 3.16.0, the Typebot viewer (packages/embeds/js) renders anchor tags from rich text bubble content without filtering the javascript: URI scheme.… CWE-79
Cross-site Scripting
CVE-2026-39964 2026-05-23 13:16 2026-05-23 Show GitHub Exploit DB Packet Storm
2819 8.1 HIGH
Network
- - (Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can c… CWE-610
CWE-639
Externally Controlled Reference to a Resource in Another Sphere
 Authorization Bypass Through User-Controlled Key
CVE-2026-45760 2026-05-23 12:16 2026-05-21 Show GitHub Exploit DB Packet Storm
2820 8.1 HIGH
Network
- - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Co… CWE-122
Heap-based Buffer Overflow
CVE-2026-9256 2026-05-23 10:16 2026-05-23 Show GitHub Exploit DB Packet Storm