Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192501	7.5	重要 Network	Wireshark	-	Wireshark における書式文字列に関する脆弱性	CWE-134 書式文字列の問題	CVE-2017-15191	2017-10-30 16:47	2017-10-10	Show	GitHub Exploit DB Packet Storm

192502	6.1	警告 Network	NexusPHP project	-	NexusPHP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-12792	2017-10-30 16:47	2017-08-21	Show	GitHub Exploit DB Packet Storm

192503	6.1	警告 Network	Compass Rose project	-	Drupal 用 Compass Rose モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-7980	2017-10-30 16:47	2015-08-4	Show	GitHub Exploit DB Packet Storm

192504	5.5	警告 Local	Google	-	Google Chrome におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2015-1206	2017-10-30 16:47	2015-01-30	Show	GitHub Exploit DB Packet Storm

192505	8.8	重要 Network	Jenkins プロジェクト	-	Poll SCM プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-1000093	2017-10-30 16:41	2017-07-10	Show	GitHub Exploit DB Packet Storm

192506	8.8	重要 Network	Intelliants	-	Subrion CMS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-15063	2017-10-30 16:32	2017-10-10	Show	GitHub Exploit DB Packet Storm

192507	7.5	重要 Network	libcsoap project	-	libcsoap における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2015-2297	2017-10-30 16:32	2015-03-15	Show	GitHub Exploit DB Packet Storm

192508	6.1	警告 Network	Cozmoslabs	-	WordPress 用 Profile Builder プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8492	2017-10-30 16:32	2014-10-30	Show	GitHub Exploit DB Packet Storm

192509	6.3	警告 Network	Jenkins プロジェクト	-	GitHub Branch Source プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-1000091	2017-10-30 16:24	2017-07-10	Show	GitHub Exploit DB Packet Storm

192510	3.1	低 Network	Jenkins プロジェクト	-	Datadog プラグインにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-1000114	2017-10-30 16:11	2017-08-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
721	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the applica…	CWE-20 Improper Input Validation	CVE-2026-47903	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

722	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47905	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

723	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47904	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

724	6.5	MEDIUM Network	mongodb	mongodb	The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechani…	CWE-617 Reachable Assertion	CVE-2026-9748	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

725	6.5	MEDIUM Network	mongodb	mongodb	An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in…	CWE-617 Reachable Assertion	CVE-2026-9750	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

726	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71329	2026-06-16 02:09	2026-06-10	Show	GitHub Exploit DB Packet Storm

727	8.8	HIGH Network	splunk	splunk splunk_cloud_platform splunk_secure_gateway	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers…	CWE-502 Deserialization of Untrusted Data	CVE-2026-20251	2026-06-16 02:08	2026-06-11	Show	GitHub Exploit DB Packet Storm

728	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71330	2026-06-16 02:00	2026-06-10	Show	GitHub Exploit DB Packet Storm

729	6.5	MEDIUM Network	mongodb	mongodb	Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.	CWE-617 Reachable Assertion	CVE-2026-9747	2026-06-16 01:58	2026-06-10	Show	GitHub Exploit DB Packet Storm

730	6.5	MEDIUM Network	mongodb	mongodb	In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may derefe…	CWE-476 NULL Pointer Dereference	CVE-2026-9743	2026-06-16 01:56	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed