Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193461 7.5 重要
Network 		Sierra Wireless - Sierra Wireless AirLink Raven XE および XT における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-6046 2017-07-25 13:39 2017-04-25 Show GitHub Exploit DB Packet Storm
193462 9.8 緊急
Network 		Sierra Wireless - Sierra Wireless AirLink Raven XE および XT における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2017-6044 2017-07-25 13:39 2017-04-25 Show GitHub Exploit DB Packet Storm
193463 8.8 重要
Network 		Sierra Wireless - Sierra Wireless AirLink Raven XE および XT におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-6042 2017-07-25 13:39 2017-04-25 Show GitHub Exploit DB Packet Storm
193464 9.8 緊急
Network 		Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix 1100 および 1400 コントローラにおける暗号強度に関する脆弱性 CWE-326
不適切な暗号強度 		CVE-2017-7903 2017-07-25 13:33 2017-05-23 Show GitHub Exploit DB Packet Storm
193465 9.8 緊急
Network 		Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix 1100 および 1400 コントローラにおける暗号に関する脆弱性 CWE-310
暗号の問題 		CVE-2017-7902 2017-07-25 13:33 2017-05-23 Show GitHub Exploit DB Packet Storm
193466 9.8 緊急
Network 		Xoev - OSCI Transport Library で使用される OSCI-Transport における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2017-10670 2017-07-25 12:10 2017-06-30 Show GitHub Exploit DB Packet Storm
193467 6.5 警告
Network 		Xoev - OSCI Transport Library で使用される OSCI-Transport における署名ラッピング攻撃を実行される脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2017-10669 2017-07-25 12:10 2017-06-30 Show GitHub Exploit DB Packet Storm
193468 5.9 警告
Network 		Xoev - OSCI Transport Library で使用される OSCI-Transport におけるパディングオラクル攻撃を実行される脆弱性 CWE-200
情報漏えい 		CVE-2017-10668 2017-07-25 12:10 2017-06-30 Show GitHub Exploit DB Packet Storm
193469 5.5 警告
Local 		Antiy Labs - Antiy Antivirus Engine におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-10674 2017-07-25 11:22 2017-06-30 Show GitHub Exploit DB Packet Storm
193470 9.8 緊急
Network 		VideoLAN - VideoLAN VLC media player で使用される avcodec におけるヒープメモリの境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2017-10699 2017-07-25 11:09 2017-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2961 7.8 HIGH
Local 		freebsd freebsd The setcred(2) system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-… CWE-121
Stack-based Buffer Overflow 		CVE-2026-45250 2026-05-22 11:16 2026-05-21 Show GitHub Exploit DB Packet Storm
2962 7.7 HIGH
Network 		- - A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulat… CWE-22
Path Traversal 		CVE-2026-34911 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2963 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-34910 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2964 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an und… CWE-22
Path Traversal 		CVE-2026-34909 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2965 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. CWE-284
Improper Access Control 		CVE-2026-34908 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2966 9.1 CRITICAL
Network 		- - A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-33000 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2967 7.8 HIGH
Local 		mullvad mullvad_vpn Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation during installation or upgrade. The installer… CWE-269
CWE-345
CWE-427
NVD-CWE-noinfo
 Improper Privilege Management
 Insufficient Verification of Data Authenticity
 Uncontrolled Search Path Element 		CVE-2026-32323 2026-05-22 09:04 2026-05-19 Show GitHub Exploit DB Packet Storm
2968 4.3 MEDIUM
Network 		glpi-project glpi GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue… CWE-862
 Missing Authorization 		CVE-2026-32312 2026-05-22 08:57 2026-05-19 Show GitHub Exploit DB Packet Storm
2969 3.5 LOW
Network 		github cli `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users vie… CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences 		CVE-2026-45803 2026-05-22 08:47 2026-05-16 Show GitHub Exploit DB Packet Storm
2970 10.0 CRITICAL
Network 		microsoft azure_local
azure_resource_manager 		Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. CWE-287
NVD-CWE-noinfo
Improper Authentication 		CVE-2026-42822 2026-05-22 08:45 2026-05-19 Show GitHub Exploit DB Packet Storm