Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192881 6.5 警告
Network 		Apache Software Foundation - Apache Ranger における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-6815 2017-11-8 13:55 2016-11-9 Show GitHub Exploit DB Packet Storm
192882 6.1 警告
Network 		シスコシステムズ - Cisco IOS XE ソフトウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12272 2017-11-8 13:49 2017-10-18 Show GitHub Exploit DB Packet Storm
192883 7 重要
Local 		Linux - Linux Kernel における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2017-1000112 2017-11-8 13:44 2017-08-10 Show GitHub Exploit DB Packet Storm
192884 5.5 警告
Local 		Jenkins プロジェクト - Deploy to container プラグインにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-1000113 2017-11-8 13:44 2017-08-7 Show GitHub Exploit DB Packet Storm
192885 8.8 重要
Network 		Git project - Git におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-1000117 2017-11-8 13:44 2017-08-10 Show GitHub Exploit DB Packet Storm
192886 8.8 重要
Network 		アドビシステムズ - Adobe Flash Player に型の混同の脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2017-11292 2017-11-8 12:20 2017-10-16 Show GitHub Exploit DB Packet Storm
192887 8.8 重要
Network 		Apache Software Foundation - Apache Struts 2 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4461 2017-11-8 12:14 2016-06-17 Show GitHub Exploit DB Packet Storm
192888 8.8 重要
Network 		Ruckus Wireless, Inc. - Ruckus Wireless Zone Director コントローラおよび Unleashed AP のファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2017-6224 2017-11-8 12:00 2017-09-29 Show GitHub Exploit DB Packet Storm
192889 8.8 重要
Network 		Jenkins プロジェクト - Script Security プラグインにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-1000107 2017-11-8 11:53 2017-08-7 Show GitHub Exploit DB Packet Storm
192890 8.5 重要
Network 		Jenkins プロジェクト - Blue Ocean プラグインにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-1000106 2017-11-8 11:53 2017-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
561 7.3 HIGH
Network 		pnpm pnpm pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline (@pnpm/patch-package) performs no path validation on file paths extracted from .patch files. An attacker who … Update CWE-22
Path Traversal 		CVE-2026-50015 2026-06-30 06:15 2026-06-26 Show GitHub Exploit DB Packet Storm
562 7.3 HIGH
Network 		pnpm pnpm pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm passes the lockfile-controlled git resolution.commit value to git fetch without a -- separator or commit-format validation. For git depend… Update CWE-88
Argument Injection 		CVE-2026-50014 2026-06-30 06:14 2026-06-26 Show GitHub Exploit DB Packet Storm
563 7.5 HIGH
Network 		pnpm pnpm pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile do… Update CWE-353
 Missing Support for Integrity Check 		CVE-2026-48995 2026-06-30 05:30 2026-06-26 Show GitHub Exploit DB Packet Storm
564 4.3 MEDIUM
Network 		revive-adserver revive_adserver A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers through the `tracker-campaigns.php` script in … Update CWE-284
Improper Access Control 		CVE-2026-50739 2026-06-30 05:22 2026-06-26 Show GitHub Exploit DB Packet Storm
565 5.4 MEDIUM
Network 		revive-adserver revive_adserver A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could exploit the refresh parameter of the iFrame … Update CWE-79
Cross-site Scripting 		CVE-2026-50740 2026-06-30 05:22 2026-06-26 Show GitHub Exploit DB Packet Storm
566 8.8 HIGH
Network 		revive-adserver revive_adserver Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin ident… Update CWE-94
Code Injection 		CVE-2026-50741 2026-06-30 05:21 2026-06-26 Show GitHub Exploit DB Packet Storm
567 5.4 MEDIUM
Network 		revive-adserver revive_adserver A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without… Update CWE-79
Cross-site Scripting 		CVE-2026-50742 2026-06-30 05:20 2026-06-26 Show GitHub Exploit DB Packet Storm
568 4.3 MEDIUM
Network 		revive-adserver revive_adserver A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method … Update CWE-284
Improper Access Control 		CVE-2026-50744 2026-06-30 05:19 2026-06-26 Show GitHub Exploit DB Packet Storm
569 7.2 HIGH
Network 		- - The WP Meta SEO plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REQUEST_URI server variable in all versions up to, and including, 4.5.18. When the plugin's `… Update CWE-79
Cross-site Scripting 		CVE-2026-9643 2026-06-30 05:17 2026-06-24 Show GitHub Exploit DB Packet Storm
570 4.3 MEDIUM
Network 		- - The 24liveblog - live blog tool plugin for WordPress is vulnerable to Exposure of Sensitive Information in versions up to, and including, 2.2. This is due to the lb24_block_enqueue_scripts() function… Update CWE-200
Information Exposure 		CVE-2026-9183 2026-06-30 05:17 2026-06-24 Show GitHub Exploit DB Packet Storm