Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194231	9.8	緊急 Network	Cloud Foundry Foundation	-	Cloud Foundry Foundation routing-release および cf-release における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2016-8218	2017-07-10 15:49	2016-12-9	Show	GitHub Exploit DB Packet Storm

194232	9.8	緊急 Network	Cloud Foundry Foundation	-	Cloud Foundry Foundation Cloud Foundry および cf-mysql-release におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2016-6655	2017-07-10 15:49	2016-10-17	Show	GitHub Exploit DB Packet Storm

194233	9.8	緊急 Network	D-Link Systems, Inc.	-	D-Link DIR-615 ワイヤレス N 300 ルータにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2017-9542	2017-07-10 15:40	2017-06-7	Show	GitHub Exploit DB Packet Storm

194234	8.8	重要 Network	OTRS プロジェクト	-	Open Ticket Request System における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-9324	2017-07-10 15:31	2017-06-6	Show	GitHub Exploit DB Packet Storm

194235	5.4	警告 Network	F5 Networks	-	複数の F5 製品の Configuration Utility デバイス名変更ページにおける格納型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-7469	2017-07-10 15:30	2016-09-9	Show	GitHub Exploit DB Packet Storm

194236	7.5	重要 Network	Huawei	-	複数の Huawei Campus シリーズスイッチモデルの IP スタックにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-3913	2017-07-10 15:13	2015-05-6	Show	GitHub Exploit DB Packet Storm

194237	6.1	警告 Network	DELL EMC (旧 EMC Corporation)	-	複数の EMC RSA 製品における反射型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5003	2017-07-10 15:09	2017-06-8	Show	GitHub Exploit DB Packet Storm

194238	7.5	重要 Network	Fedora Project pulp project	-	Pulp における証明書・パスワードの管理に関する脆弱性	CWE-255 証明書・パスワード管理	CVE-2016-3704	2017-07-10 14:45	2016-04-22	Show	GitHub Exploit DB Packet Storm

194239	5.5	警告 Local	Fedora Project pulp project	-	Pulp の pulp-qpid-ssl-cfg スクリプトにおける CA 鍵を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3696	2017-07-10 14:45	2016-04-20	Show	GitHub Exploit DB Packet Storm

194240	7.3	重要 Local	NETWORK LOOKOUT	-	Net Monitor for Employees における認可・権限・アクセス制御に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-7180	2017-07-10 12:18	2017-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2551	6.3	MEDIUM Network	-	-	Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain API endpoints related to platform mail notficatio…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-2254	2026-05-27 13:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2552	7.7	HIGH Network	-	-	Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities.	CWE-611 XXE	CVE-2026-2253	2026-05-27 13:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2553	9.8	CRITICAL Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.hpp). Five methods (append_dynamic_buffer,…	CWE-787 CWE-122 CWE-193 Out-of-bounds Write Heap-based Buffer Overflow Off-by-one Error	CVE-2026-48689	2026-05-27 11:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2554	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2026-8680	2026-05-27 08:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2555	5.4	MEDIUM Network	snipeitapp	snipe-it	Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scripting (XSS). This vulne…	CWE-79 Cross-site Scripting	CVE-2026-44831	2026-05-27 05:39	2026-05-27	Show	GitHub Exploit DB Packet Storm

2556	8.8	HIGH Network	snipeitapp	snipe-it	Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated user with only users.edit permission can escalate their own privileges to admin by sending a PATCH request to /api…	CWE-281 CWE-863 Improper Preservation of Permissions Incorrect Authorization	CVE-2026-44832	2026-05-27 05:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

2557	7.1	HIGH Network	snipeitapp	snipe-it	Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an open redirect vulnerability in Snipe-IT allows attackers to redirect users to malicious sites via unvalidated HTTP Referer header…	CWE-601 Open Redirect	CVE-2026-44833	2026-05-27 05:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

2558	4.8	MEDIUM Network	powerdns	authoritative	Incorrect Behaviour of Views with TCP PROXY Requests	CWE-284 Improper Access Control	CVE-2026-41999	2026-05-27 05:32	2026-05-21	Show	GitHub Exploit DB Packet Storm

2559	8.1	HIGH Local	-	-	Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Co…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-25193	2026-05-27 05:24	2026-05-25	Show	GitHub Exploit DB Packet Storm

2560	6.6	MEDIUM Network	-	-	SQL Injection affecting the Access Manager role.	CWE-89 SQL Injection	CVE-2026-27768	2026-05-27 05:24	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed