Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193441 7.5 重要
Network
The Tcpdump Group - tcpdump におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-11108 2017-07-31 17:57 2017-07-7 Show GitHub Exploit DB Packet Storm
193442 6.1 警告
Network
Deon George - phpLDAPadmin の htdocs/entry_chooser.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-11107 2017-07-31 17:51 2017-07-8 Show GitHub Exploit DB Packet Storm
193443 7.5 重要
Network
Fabrice Bellard - QEMU の qemu-nbd サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-9524 2017-07-31 17:49 2017-05-26 Show GitHub Exploit DB Packet Storm
193444 8.8 重要
Network
SWFTools - SWFTools の lib/modules/swftools.c の swf_Relocate() 関数における NULL ポインタデリファレンスを引き起こされる脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-11101 2017-07-31 17:46 2017-06-11 Show GitHub Exploit DB Packet Storm
193445 8.8 重要
Network
SWFTools - SWFTools の lib/rxfswf.c の swf_FoldSprite() 関数における NULL ポインタデリファレンスを引き起こされる脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-11100 2017-07-31 17:46 2017-06-11 Show GitHub Exploit DB Packet Storm
193446 8.8 重要
Network
SWFTools - SWFTools の lib/wav.c の wav_convert2mono() 関数におけるセグメンテーション違反を引き起こされる脆弱性 CWE-20
不適切な入力確認
CVE-2017-11099 2017-07-31 17:46 2017-06-11 Show GitHub Exploit DB Packet Storm
193447 8.8 重要
Network
SWFTools - SWFTools の lib/png.c の png_load() 関数におけるセグメンテーション違反を引き起こされる脆弱性 CWE-20
不適切な入力確認
CVE-2017-11098 2017-07-31 17:46 2017-06-11 Show GitHub Exploit DB Packet Storm
193448 8.8 重要
Network
SWFTools - SWFTools の lib/q.c の dict_lookup() 関数における NULL ポインタデリファレンスを引き起こされる脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-11097 2017-07-31 17:46 2017-06-11 Show GitHub Exploit DB Packet Storm
193449 9.9 緊急
Network
NfSen - NfSen における任意の OS コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2017-7175 2017-07-31 16:59 2017-01-24 Show GitHub Exploit DB Packet Storm
193450 5.5 警告
Local
シスコシステムズ - Cisco Prime Network Gateway の CLI におけるシステムプロセス情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2017-6726 2017-07-31 16:56 2017-07-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3041 7.1 HIGH
Network
- - Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve a… CWE-502
 Deserialization of Untrusted Data
CVE-2026-9291 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
3042 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.11.0 through 2.28.1 allow any authenticated user to inject arbitrary HTML by updating their account's font family. Upon explo… CWE-79
Cross-site Scripting
CVE-2026-40596 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
3043 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given any pre-existing XSS / HTML injection vulnerability, an attacker can bypass the Content Security Pol… CWE-79
CWE-358
Cross-site Scripting
 Improperly Implemented Security Check for Standard
CVE-2026-40597 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
3044 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.11.0 through 2.28.1, a Stored XSS vulnerability is caused by incorrect escaping of a saved filter's owner, allowing an att… CWE-79
Cross-site Scripting
CVE-2026-40607 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
3045 8.8 HIGH
Network
litellm litellm LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restri… CWE-863
 Incorrect Authorization
CVE-2026-47102 2026-05-23 04:39 2026-05-22 Show GitHub Exploit DB Packet Storm
3046 8.8 HIGH
Network
litellm litellm LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored with… CWE-863
 Incorrect Authorization
CVE-2026-47101 2026-05-23 04:39 2026-05-22 Show GitHub Exploit DB Packet Storm
3047 9.8 CRITICAL
Network
drupal drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.… CWE-89
SQL Injection
CVE-2026-9082 2026-05-23 04:38 2026-05-21 Show GitHub Exploit DB Packet Storm
3048 7.5 HIGH
Network
apache cxf The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code execution capabilities, if untrusted use… CWE-20
 Improper Input Validation 
CVE-2026-44417 2026-05-23 04:29 2026-05-22 Show GitHub Exploit DB Packet Storm
3049 5.4 MEDIUM
Network
mattermost mattermost_server Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to g… CWE-863
 Incorrect Authorization
CVE-2026-28735 2026-05-23 04:28 2026-05-23 Show GitHub Exploit DB Packet Storm
3050 6.4 MEDIUM
Network
concretecms concrete_cms For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 (suspended, banned, terminated employee) can still authenticate via OAuth and r… CWE-1287
 Improper Validation of Specified Type of Input
CVE-2026-7887 2026-05-23 04:21 2026-05-22 Show GitHub Exploit DB Packet Storm