Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192821	6.1	警告 Network	ヒューレット・パッカード・エンタープライズ	-	HP UCMDB Foundation ソフトウェアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-14354	2017-10-24 11:16	2017-10-4	Show	GitHub Exploit DB Packet Storm

192822	8.8	重要 Network	ヒューレット・パッカード・エンタープライズ	-	HP UCMDB Foundation ソフトウェアにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2017-14353	2017-10-24 11:16	2017-10-4	Show	GitHub Exploit DB Packet Storm

192823	6.1	警告 Network	2kblater LTD	-	WordPress 用 2kb Amazon Affiliates Store プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-14622	2017-10-24 11:04	2017-09-20	Show	GitHub Exploit DB Packet Storm

192824	5.5	警告 Local	GNU Project	-	GNU Binutils におけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2017-15025	2017-10-24 10:59	2017-09-24	Show	GitHub Exploit DB Packet Storm

192825	5.5	警告 Local	GNU Project	-	GNU Binutils における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-15024	2017-10-24 10:59	2017-09-24	Show	GitHub Exploit DB Packet Storm

192826	5.5	警告 Local	GNU Project	-	GNU Binutils における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-15023	2017-10-24 10:59	2017-09-25	Show	GitHub Exploit DB Packet Storm

192827	5.5	警告 Local	GNU Project	-	GNU Binutils における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-15022	2017-10-24 10:59	2017-09-25	Show	GitHub Exploit DB Packet Storm

192828	5.5	警告 Local	GNU Project	-	GNU Binutils におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15021	2017-10-24 10:59	2017-09-24	Show	GitHub Exploit DB Packet Storm

192829	7.8	重要 Local	GNU Project	-	GNU Binutils におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-15020	2017-10-24 10:59	2017-09-25	Show	GitHub Exploit DB Packet Storm

192830	7.5	重要 Network	Inpsyde	-	WordPress 用 BackWPup プラグインにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2017-2551	2017-10-24 10:37	2017-09-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
721	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the applica…	CWE-20 Improper Input Validation	CVE-2026-47903	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

722	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47905	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

723	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47904	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

724	6.5	MEDIUM Network	mongodb	mongodb	The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechani…	CWE-617 Reachable Assertion	CVE-2026-9748	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

725	6.5	MEDIUM Network	mongodb	mongodb	An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in…	CWE-617 Reachable Assertion	CVE-2026-9750	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

726	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71329	2026-06-16 02:09	2026-06-10	Show	GitHub Exploit DB Packet Storm

727	8.8	HIGH Network	splunk	splunk splunk_cloud_platform splunk_secure_gateway	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers…	CWE-502 Deserialization of Untrusted Data	CVE-2026-20251	2026-06-16 02:08	2026-06-11	Show	GitHub Exploit DB Packet Storm

728	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71330	2026-06-16 02:00	2026-06-10	Show	GitHub Exploit DB Packet Storm

729	6.5	MEDIUM Network	mongodb	mongodb	Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.	CWE-617 Reachable Assertion	CVE-2026-9747	2026-06-16 01:58	2026-06-10	Show	GitHub Exploit DB Packet Storm

730	6.5	MEDIUM Network	mongodb	mongodb	In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may derefe…	CWE-476 NULL Pointer Dereference	CVE-2026-9743	2026-06-16 01:56	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed