Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
193151	7.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2017-12136	2017-09-19 11:52	2017-08-15	Show	GitHub Exploit DB Packet Storm

193152	8.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-12135	2017-09-19 11:52	2017-08-15	Show	GitHub Exploit DB Packet Storm

193153	8.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-12134	2017-09-19 11:52	2017-08-15	Show	GitHub Exploit DB Packet Storm

193154	9.8	緊急 Network	サムスン	-	Samsung S4 におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2015-1801	2017-09-19 11:27	2015-09-21	Show	GitHub Exploit DB Packet Storm

193155	7.5	重要 Network	サムスン	-	Samsung S4 における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2015-1800	2017-09-19 11:27	2015-09-21	Show	GitHub Exploit DB Packet Storm

193156	5.4	警告 Network	Synology Inc.	-	Synology Photo Station におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-9555	2017-09-19 11:18	2017-08-24	Show	GitHub Exploit DB Packet Storm

193157	6.5	警告 Network	Synology Inc.	-	Synology DNS Server におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-12074	2017-09-19 11:18	2017-08-23	Show	GitHub Exploit DB Packet Storm

193158	8.8	重要 Network	ZTE	-	ZTE ADSL ZXV10 W300 モデムにおける証明書・パスワードの管理に関する脆弱性	CWE-255 証明書・パスワード管理	CVE-2015-7259	2017-09-19 11:06	2015-11-10	Show	GitHub Exploit DB Packet Storm

193159	7.5	重要 Network	ZTE	-	ZTE ADSL ZXV10 W300 モデムにおけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2015-7257	2017-09-19 11:06	2015-11-10	Show	GitHub Exploit DB Packet Storm

193160	6.1	警告 Network	Cloud4Wi, Inc	-	Cloud4Wi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-4699	2017-09-19 11:06	2015-09-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351	5.5	MEDIUM Local	microsoft	visual_studio_code	Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Update	CWE-20 CWE-23 NVD-CWE-noinfo Improper Input Validation Relative Path Traversal	CVE-2026-48569	2026-06-13 01:57	2026-06-10	Show	GitHub Exploit DB Packet Storm

352	6.5	MEDIUM Network	gpac	gpac	GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). bThis vulnerability allows attackers to cause a Denial of… Update	CWE-1077 Floating Point Comparison with Incorrect Operator	CVE-2025-55658	2026-06-13 01:46	2026-06-10	Show	GitHub Exploit DB Packet Storm

353	4.4	MEDIUM Network	-	-	IPAM is the IP address Manager for Cluster API Provider Metal3. Prior to versions 1.11.7, 1.12.4, and 1.13.0, the IPAM controller's ClusterRole granted full CRUD permissions (create, delete, get, lis… New	CWE-250 Execution with Unnecessary Privileges	CVE-2026-47190	2026-06-13 01:24	2026-06-13	Show	GitHub Exploit DB Packet Storm

354	-		-	-	A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collecti… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-45830	2026-06-13 01:23	2026-06-13	Show	GitHub Exploit DB Packet Storm

355	-		-	-	The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, d… New	CWE-863 Incorrect Authorization	CVE-2026-45831	2026-06-13 01:23	2026-06-13	Show	GitHub Exploit DB Packet Storm

356	-		-	-	All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 en… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-45832	2026-06-13 01:23	2026-06-13	Show	GitHub Exploit DB Packet Storm

357	-		-	-	The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution. New	-	CVE-2026-40677	2026-06-13 01:22	2026-06-13	Show	GitHub Exploit DB Packet Storm

358	-		-	-	A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection … New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-8828	2026-06-13 01:22	2026-06-13	Show	GitHub Exploit DB Packet Storm

359	-		-	-	Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4. New	CWE-284 Improper Access Control	CVE-2026-44976	2026-06-13 01:20	2026-06-13	Show	GitHub Exploit DB Packet Storm

360	8.7	HIGH Network	-	-	Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the ba… New	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-47691	2026-06-13 01:18	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed