Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192861	6.1	警告 Network	Elasticsearch	-	Kibana におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-11479	2017-10-23 16:44	2017-09-18	Show	GitHub Exploit DB Packet Storm

192862	5.9	警告 Network	Percona	-	Percona Toolkit および XtraBackup における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2015-1027	2017-10-23 16:44	2015-05-6	Show	GitHub Exploit DB Packet Storm

192863	7.8	重要 Local	Apache Software Foundation	-	Apache Tika における XML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2016-4434	2017-10-23 16:43	2016-05-26	Show	GitHub Exploit DB Packet Storm

192864	4.7	警告 Local	OpenHPI project	-	OpenHPI におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2015-3248	2017-10-23 16:42	2015-06-19	Show	GitHub Exploit DB Packet Storm

192865	8.8	重要 Network	Claydip	-	Claydip Laravel Airbnb Clone における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2017-14704	2017-10-23 16:33	2017-09-22	Show	GitHub Exploit DB Packet Storm

192866	3.1	低 Network	Fedora Project wesnoth	-	Battle for Wesnoth における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2015-5070	2017-10-23 16:23	2015-06-29	Show	GitHub Exploit DB Packet Storm

192867	4.3	警告 Network	Fedora Project wesnoth	-	Battle for Wesnoth における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2015-5069	2017-10-23 16:23	2015-06-29	Show	GitHub Exploit DB Packet Storm

192868	6.1	警告 Network	レッドハット	-	RHMAP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-7554	2017-10-23 16:06	2017-08-20	Show	GitHub Exploit DB Packet Storm

192869	6.3	警告 Network	レッドハット	-	App Studio におけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2017-7553	2017-10-23 16:06	2017-09-18	Show	GitHub Exploit DB Packet Storm

192870	9.8	緊急 Network	レッドハット	-	millicore におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-7552	2017-10-23 16:06	2017-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4151	8.8	HIGH Network	google	chrome	Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security …	CWE-269 Improper Privilege Management	CVE-2026-9999	2026-06-2 03:14	2026-05-29	Show	GitHub Exploit DB Packet Storm

4152	7.8	HIGH Local	-	-	Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary code via a crafted path that matches the improperly terminated search criteria of …	CWE-77 Command Injection	CVE-2026-38945	2026-06-2 03:12	2026-05-28	Show	GitHub Exploit DB Packet Storm

4153	7.8	HIGH Local	-	-	Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle options.	CWE-77 Command Injection	CVE-2025-69600	2026-06-2 03:12	2026-05-28	Show	GitHub Exploit DB Packet Storm

4154	9.9	CRITICAL Network	-	-	Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are exec…	CWE-78 OS Command	CVE-2026-9645	2026-06-2 03:12	2026-05-29	Show	GitHub Exploit DB Packet Storm

4155	6.1	MEDIUM Network	-	-	A reflected cross-site scripting issue exists in URL handling.	CWE-80 Basic XSS	CVE-2026-9646	2026-06-2 03:12	2026-05-29	Show	GitHub Exploit DB Packet Storm

4156	4.0	MEDIUM Local	-	-	XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupted application data by sending u…	CWE-1286 Improper Validation of Syntactic Correctness of Input	CVE-2026-10099	2026-06-2 03:12	2026-05-30	Show	GitHub Exploit DB Packet Storm

4157	7.2	HIGH Network	-	-	The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code. By uploading a malicious ZIP archive containin…	CWE-22 Path Traversal	CVE-2026-39276	2026-06-2 03:12	2026-05-30	Show	GitHub Exploit DB Packet Storm

4158	5.7	MEDIUM Network	-	-	An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. Th…	CWE-200 CWE-269 Information Exposure Improper Privilege Management	CVE-2026-48210	2026-06-2 03:12	2026-06-1	Show	GitHub Exploit DB Packet Storm

4159	5.7	MEDIUM Network	-	-	An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS…	CWE-400 CWE-770 Uncontrolled Resource Consumption Allocation of Resources Without Limits or Throttling	CVE-2026-48187	2026-06-2 03:12	2026-06-1	Show	GitHub Exploit DB Packet Storm

4160	9.1	CRITICAL Network	-	-	An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue o…	CWE-20 Improper Input Validation	CVE-2026-48188	2026-06-2 03:12	2026-06-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed