Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192861	6.1	警告 Network	Elasticsearch	-	Kibana におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-11479	2017-10-23 16:44	2017-09-18	Show	GitHub Exploit DB Packet Storm

192862	5.9	警告 Network	Percona	-	Percona Toolkit および XtraBackup における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2015-1027	2017-10-23 16:44	2015-05-6	Show	GitHub Exploit DB Packet Storm

192863	7.8	重要 Local	Apache Software Foundation	-	Apache Tika における XML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2016-4434	2017-10-23 16:43	2016-05-26	Show	GitHub Exploit DB Packet Storm

192864	4.7	警告 Local	OpenHPI project	-	OpenHPI におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2015-3248	2017-10-23 16:42	2015-06-19	Show	GitHub Exploit DB Packet Storm

192865	8.8	重要 Network	Claydip	-	Claydip Laravel Airbnb Clone における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2017-14704	2017-10-23 16:33	2017-09-22	Show	GitHub Exploit DB Packet Storm

192866	3.1	低 Network	Fedora Project wesnoth	-	Battle for Wesnoth における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2015-5070	2017-10-23 16:23	2015-06-29	Show	GitHub Exploit DB Packet Storm

192867	4.3	警告 Network	Fedora Project wesnoth	-	Battle for Wesnoth における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2015-5069	2017-10-23 16:23	2015-06-29	Show	GitHub Exploit DB Packet Storm

192868	6.1	警告 Network	レッドハット	-	RHMAP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-7554	2017-10-23 16:06	2017-08-20	Show	GitHub Exploit DB Packet Storm

192869	6.3	警告 Network	レッドハット	-	App Studio におけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2017-7553	2017-10-23 16:06	2017-09-18	Show	GitHub Exploit DB Packet Storm

192870	9.8	緊急 Network	レッドハット	-	millicore におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-7552	2017-10-23 16:06	2017-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
721	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the applica…	CWE-20 Improper Input Validation	CVE-2026-47903	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

722	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47905	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

723	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47904	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

724	6.5	MEDIUM Network	mongodb	mongodb	The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechani…	CWE-617 Reachable Assertion	CVE-2026-9748	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

725	6.5	MEDIUM Network	mongodb	mongodb	An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in…	CWE-617 Reachable Assertion	CVE-2026-9750	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

726	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71329	2026-06-16 02:09	2026-06-10	Show	GitHub Exploit DB Packet Storm

727	8.8	HIGH Network	splunk	splunk splunk_cloud_platform splunk_secure_gateway	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers…	CWE-502 Deserialization of Untrusted Data	CVE-2026-20251	2026-06-16 02:08	2026-06-11	Show	GitHub Exploit DB Packet Storm

728	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71330	2026-06-16 02:00	2026-06-10	Show	GitHub Exploit DB Packet Storm

729	6.5	MEDIUM Network	mongodb	mongodb	Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.	CWE-617 Reachable Assertion	CVE-2026-9747	2026-06-16 01:58	2026-06-10	Show	GitHub Exploit DB Packet Storm

730	6.5	MEDIUM Network	mongodb	mongodb	In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may derefe…	CWE-476 NULL Pointer Dereference	CVE-2026-9743	2026-06-16 01:56	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed