Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192881	7.5	重要 Local	インテル	-	複数の Intel NUC Kit 製品のファームウェアにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-5721	2017-11-10 16:13	2017-10-6	Show	GitHub Exploit DB Packet Storm

192882	7.1	重要 Physics	インテル	-	複数の Intel NUC Kit 製品のファームウェアにおける認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-5701	2017-11-10 16:13	2017-10-6	Show	GitHub Exploit DB Packet Storm

192883	8.4	重要 Local	インテル	-	複数の Intel NUC Kit 製品のファームウェアにおける証明書・パスワードの管理に関する脆弱性	CWE-255 証明書・パスワード管理	CVE-2017-5700	2017-11-10 16:13	2017-10-6	Show	GitHub Exploit DB Packet Storm

192884	6.5	警告 Network	GridGain Systems, Inc.	-	GridGain におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-14614	2017-11-10 16:05	2017-10-5	Show	GitHub Exploit DB Packet Storm

192885	7.5	重要 Network	Digium	-	Asterisk および Certified Asterisk における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-14603	2017-11-10 16:01	2017-09-19	Show	GitHub Exploit DB Packet Storm

192886	5	警告 Local	Mp3splt project	-	Libmp3splt における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-15185	2017-11-10 15:59	2017-09-26	Show	GitHub Exploit DB Packet Storm

192887	7.5	重要 Network	InFocus Corporation	-	InFocus Mondopad における認証に関する脆弱性	CWE-287 不適切な認証	CVE-2017-14972	2017-11-10 15:54	2017-09-29	Show	GitHub Exploit DB Packet Storm

192888	5.5	警告 Local	InFocus Corporation	-	Infocus Mondopad における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-14971	2017-11-10 15:54	2017-09-29	Show	GitHub Exploit DB Packet Storm

192889	7.8	重要 Local	X.Org Foundation Debian	-	X.Org Server におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-13723	2017-11-10 15:51	2017-10-4	Show	GitHub Exploit DB Packet Storm

192890	4.7	警告 Local	X.Org Foundation Debian	-	X.Org Server における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-13721	2017-11-10 15:51	2017-10-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2911	6.5	MEDIUM Network	-	-	Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2026-54197	2026-06-16 23:52	2026-06-16	Show	GitHub Exploit DB Packet Storm

2912	7.1	HIGH Network	-	-	Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.	CWE-79 Cross-site Scripting	CVE-2026-54198	2026-06-16 23:52	2026-06-16	Show	GitHub Exploit DB Packet Storm

2913	9.9	CRITICAL Network	-	-	Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through 0.…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2026-40750	2026-06-16 23:52	2026-06-16	Show	GitHub Exploit DB Packet Storm

2914	9.6	CRITICAL Adjacent	kubev2v	assisted_migration_agent	A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed g…	CWE-59 CWE-22 Link Following Path Traversal	CVE-2026-53476	2026-06-16 23:52	2026-06-11	Show	GitHub Exploit DB Packet Storm

2915	7.4	HIGH Network	kubev2v	assisted_migration_agent	A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Mid…	CWE-295 Improper Certificate Validation	CVE-2026-53475	2026-06-16 23:41	2026-06-11	Show	GitHub Exploit DB Packet Storm

2916	6.5	MEDIUM Network	kebev2v	migration_assessment	A flaw was found in migration-planner. A remote authenticated attacker could exploit this vulnerability by uploading a specially crafted RVTools .xlsx file. Due to improper input sanitization, malici…	CWE-89 SQL Injection	CVE-2026-53474	2026-06-16 23:37	2026-06-11	Show	GitHub Exploit DB Packet Storm

2917	5.4	MEDIUM Network	kubev2v	migration_planner_ui	A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organizational user click…	CWE-79 Cross-site Scripting	CVE-2026-53473	2026-06-16 23:29	2026-06-11	Show	GitHub Exploit DB Packet Storm

2918	8.1	HIGH Network	tp-link	tapo_c110_firmware	An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to improper handling of user-controlled input. Externally controlled data is interpreted as a format stri…	CWE-134 Use of Externally-Controlled Format String	CVE-2026-6250	2026-06-16 23:19	2026-06-12	Show	GitHub Exploit DB Packet Storm

2919	6.1	MEDIUM Network	diagrams	drawio	draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary JavaScript in the editor's origin when the file is opened. …	CWE-79 Cross-site Scripting	CVE-2026-46642	2026-06-16 22:54	2026-06-11	Show	GitHub Exploit DB Packet Storm

2920	8.5	HIGH Network	litespeedtech	litespeed_cpanel_plugin litespeed_whm_plugin	LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running Clo…	CWE-61 UNIX Symbolic Link (Symlink) Following	CVE-2026-54420	2026-06-16 21:55	2026-06-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed