Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192841 6.1 警告
Network
Good Technology - Android 用 Good for Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4925 2017-09-25 12:04 2014-07-11 Show GitHub Exploit DB Packet Storm
192842 9.8 緊急
Network
バラクーダネットワークス - Barracuda Load Balancer における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8428 2017-09-25 12:00 2014-01-3 Show GitHub Exploit DB Packet Storm
192843 9.8 緊急
Network
バラクーダネットワークス - Barracuda Load Balancer におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2014-8426 2017-09-25 12:00 2014-01-3 Show GitHub Exploit DB Packet Storm
192844 6.1 警告
Network
MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2046 2017-09-25 11:56 2015-02-10 Show GitHub Exploit DB Packet Storm
192845 7.5 重要
Network
GNU Project - Emacs における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2014-9483 2017-09-25 11:56 2014-12-28 Show GitHub Exploit DB Packet Storm
192846 6.1 警告
Network
vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9469 2017-09-25 11:56 2015-02-12 Show GitHub Exploit DB Packet Storm
192847 6.5 警告
Network
Libfpx project - libfpx における二重解放に関する脆弱性 CWE-415
二重解放
CVE-2017-12925 2017-09-25 11:53 2017-08-9 Show GitHub Exploit DB Packet Storm
192848 6.5 警告
Network
Libfpx project - libfpx におけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算
CVE-2017-12924 2017-09-25 11:53 2017-08-9 Show GitHub Exploit DB Packet Storm
192849 6.5 警告
Network
Libfpx project - libfpx における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-12923 2017-09-25 11:53 2017-08-9 Show GitHub Exploit DB Packet Storm
192850 6.5 警告
Network
Libfpx project - libfpx における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-12922 2017-09-25 11:53 2017-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 9.4 CRITICAL
Network
- - Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter t… New CWE-306
Missing Authentication for Critical Function
CVE-2026-49973 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
62 7.1 HIGH
Network
- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.0.14, cross-site GET request can trigger stored cron commands on… New CWE-352
 Origin Validation Error
CVE-2026-49396 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
63 7.7 HIGH
Network
- - Koel is a free, open-source music streaming solution. Prior to version 9.3.5, Koel validates the podcast feed URL via the SafeUrl rule (DNS resolution + public IP check), but the individual episode <… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-47260 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
64 6.5 MEDIUM
Network
- - ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of authorization. They can… New CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization
CVE-2026-47238 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
65 5.4 MEDIUM
Network
- - NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot (AVB) v… New CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound
CVE-2026-47223 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
66 - - - Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to before 3.21.6 and 4.0… New CWE-284
CWE-288
Improper Access Control
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-47200 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
67 - - - Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, a moderator with the relevant Discord permission bit can use the bot to moderate users above them in the Discord role hierarchy, as lon… New CWE-862
 Missing Authorization
CVE-2026-47197 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
68 - - - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The diagnostics_channel, … New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-47141 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
69 10.0 CRITICAL
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookupSetter__, Buffer, "__proto_… New CWE-913
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-47131 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
70 7.7 HIGH
Network
- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, nezha's dashboard supports two user roles: RoleAdmin (Role=… New CWE-863
CWE-918
 Incorrect Authorization
Server-Side Request Forgery (SSRF) 
CVE-2026-46717 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm