Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194291	8.8	重要 Network	OpenJPEG project	-	OpenJPEG におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-14151	2017-09-26 16:59	2017-08-15	Show	GitHub Exploit DB Packet Storm

194292	8.8	重要 Network	Helpdezk	-	HelpDEZk におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2017-14146	2017-09-26 16:59	2017-09-5	Show	GitHub Exploit DB Packet Storm

194293	5.5	警告 Local	Linux	-	Linux Kernel における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-14140	2017-09-26 16:58	2017-08-24	Show	GitHub Exploit DB Packet Storm

194294	6.5	警告 Network	サムスン	-	Samsung Galaxy S6 におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2015-7896	2017-09-26 16:53	2015-10-22	Show	GitHub Exploit DB Packet Storm

194295	6.1	警告 Network	MISP project	-	MISP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-13671	2017-09-26 16:53	2017-08-24	Show	GitHub Exploit DB Packet Storm

194296	6.1	警告 Network	Atlassian	-	Atlassian OAuth プラグインにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2017-9506	2017-09-26 16:53	2017-05-31	Show	GitHub Exploit DB Packet Storm

194297	7.2	重要 Network	Web-Dorado	-	WordPress 用 Web-Dorado Photo Gallery by WD - Responsive Photo Gallery プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-12977	2017-09-26 16:53	2017-08-20	Show	GitHub Exploit DB Packet Storm

194298	9.8	緊急 Network	OSIsoft	-	複数の OSIsoft PI Integrator 製品における認可に関する脆弱性	CWE-285 不適切な認可	CVE-2017-9653	2017-09-26 16:53	2017-07-11	Show	GitHub Exploit DB Packet Storm

194299	8.8	重要 Network	ImageMagick	-	ImageMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-14139	2017-09-26 16:44	2017-07-19	Show	GitHub Exploit DB Packet Storm

194300	9.8	緊急 Network	ImageMagick	-	ImageMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-14138	2017-09-26 16:44	2017-08-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3811	7.8	HIGH Local	-	-	A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privile…	CWE-427 Uncontrolled Search Path Element	CVE-2026-8637	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3812	-		-	-	A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks…	CWE-306 Missing Authentication for Critical Function	CVE-2026-8335	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3813	4.3	MEDIUM Network	-	-	A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite sys…	CWE-749 Exposed Dangerous Method or Function	CVE-2026-7516	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3814	7.0	HIGH Local	-	-	A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-6090	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3815	7.1	HIGH Network	-	-	libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-53689	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3816	9.6	CRITICAL Network	-	-	A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. This flaw allows the attacker…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-53470	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3817	9.1	CRITICAL Network	-	-	A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. T…	CWE-306 Missing Authentication for Critical Function	CVE-2026-53469	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3818	9.9	CRITICAL Network	-	-	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before_request → @jwt_required() (app/rout…	CWE-639 CWE-862 CWE-863 Authorization Bypass Through User-Controlled Key Missing Authorization Incorrect Authorization	CVE-2026-45552	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3819	9.8	CRITICAL Network	-	-	DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.	CWE-78 OS Command	CVE-2026-38615	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3820	9.8	CRITICAL Network	-	-	A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-36721	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed