Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194301 7.5 重要
Network 		Apache Software Foundation - Apache Hadoop の LinuxContainerExecutor における root 権限で docker コマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2017-7669 2017-06-29 17:07 2017-06-2 Show GitHub Exploit DB Packet Storm
194302 4.8 警告
Network 		Telaxus LLC - Telaxus EPESI の modules/Base/Dashboard/Dashboard_0.php における格納型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-9366 2017-06-29 17:06 2017-05-31 Show GitHub Exploit DB Packet Storm
194303 6.1 警告
Network 		The Jamroom Network - Jamroom におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6705 2017-06-29 16:56 2012-02-19 Show GitHub Exploit DB Packet Storm
194304 7.8 重要
Local 		Google - Android の Resource Power Manager におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2015-9006 2017-06-29 16:56 2017-05-1 Show GitHub Exploit DB Packet Storm
194305 6.5 警告
Network 		Google - Android OS の Android におけるブラウザのアドレスバーを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-3830 2017-06-29 16:56 2015-05-12 Show GitHub Exploit DB Packet Storm
194306 7.8 重要
Local 		Google - Android の Secure File System における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2014-9952 2017-06-29 16:56 2017-05-1 Show GitHub Exploit DB Packet Storm
194307 7.8 重要
Local 		Google - Android の Core Kernel における認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2014-9950 2017-06-29 16:56 2017-05-1 Show GitHub Exploit DB Packet Storm
194308 7.8 重要
Local 		Google - Android の Core Kernel における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2014-9946 2017-06-29 16:56 2017-05-1 Show GitHub Exploit DB Packet Storm
194309 7.8 重要
Local 		Google - Android の Secure File System における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2014-9944 2017-06-29 16:56 2017-05-1 Show GitHub Exploit DB Packet Storm
194310 7.8 重要
Local 		Google - Android の Core Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2014-9943 2017-06-29 16:56 2017-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 9.8 CRITICAL
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in versio… Update CWE-78
OS Command  		CVE-2025-41275 2026-06-2 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
12 9.8 CRITICAL
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in versio… Update CWE-78
OS Command  		CVE-2025-41276 2026-06-2 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
13 9.8 CRITICAL
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in versio… Update CWE-78
OS Command  		CVE-2025-41277 2026-06-2 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
14 7.8 HIGH
Local 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Ho… Update CWE-125
Out-of-bounds Read 		CVE-2025-41278 2026-06-2 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
15 7.8 HIGH
Local 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute cod… Update CWE-23
 Relative Path Traversal 		CVE-2025-41280 2026-06-2 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
16 7.2 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version… Update CWE-78
OS Command  		CVE-2025-41279 2026-06-2 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
17 7.8 HIGH
Local 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that al… Update CWE-78
OS Command  		CVE-2025-41281 2026-06-2 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
18 8.6 HIGH
Network 		- - Vertex is a management tool for PT (Private Tracker) users to manage streaming and watching videos. Versions prior to commit fbde301b97986d5913fc4bc95f5445750d282e11 are vulnerable to path traversal.… New CWE-22
Path Traversal 		CVE-2024-40646 2026-06-2 03:53 2026-06-2 Show GitHub Exploit DB Packet Storm
19 9.6 CRITICAL
Network 		- - Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time o… New CWE-306
CWE-1385
Missing Authentication for Critical Function
 Missing Origin Validation in WebSockets 		CVE-2026-44211 2026-06-2 03:53 2026-06-2 Show GitHub Exploit DB Packet Storm
20 6.5 MEDIUM
Network 		- - Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loo… New CWE-674
CWE-835
 Uncontrolled Recursion
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-44740 2026-06-2 03:53 2026-06-2 Show GitHub Exploit DB Packet Storm