Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 28, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194311	6.5	警告 Network	レッドハット	-	Red Hat Satellite におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-8163	2017-09-26 12:13	2014-10-10	Show	GitHub Exploit DB Packet Storm

194312	7.5	重要 Network	ppmd project	-	ppmd におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2015-1199	2017-09-26 12:13	2015-01-18	Show	GitHub Exploit DB Packet Storm

194313	5.4	警告 Network	IBM	-	IBM Sametime Media Services におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-2973	2017-09-26 10:38	2016-03-9	Show	GitHub Exploit DB Packet Storm

194314	5.3	警告 Network	IBM	-	IBM Sametime Media Services における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2016-2971	2017-09-26 10:38	2016-03-9	Show	GitHub Exploit DB Packet Storm

194315	7.5	重要 Network	EyesOfNetwork	-	EyesOfNetwork におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-13780	2017-09-25 18:08	2017-08-31	Show	GitHub Exploit DB Packet Storm

194316	9.8	緊急 Network	アドバンテック株式会社	-	Advantech WebAccess におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-12708	2017-09-25 18:03	2017-08-29	Show	GitHub Exploit DB Packet Storm

194317	9.8	緊急 Network	アドバンテック株式会社	-	Advantech WebAccess におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-12706	2017-09-25 18:03	2017-08-29	Show	GitHub Exploit DB Packet Storm

194318	8.8	重要 Network	アドバンテック株式会社	-	Advantech WebAccess における書式文字列に関する脆弱性	CWE-134 書式文字列の問題	CVE-2017-12702	2017-09-25 18:03	2017-08-29	Show	GitHub Exploit DB Packet Storm

194319	9.8	緊急 Network	アドバンテック株式会社	-	Advantech WebAccess における認証に関する脆弱性	CWE-287 不適切な認証	CVE-2017-12698	2017-09-25 18:03	2017-08-29	Show	GitHub Exploit DB Packet Storm

194320	5.5	警告 Local	Apache Software Foundation	-	Apache Hadoop における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2016-5001	2017-09-25 17:58	2016-12-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3811	7.8	HIGH Local	-	-	A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privile…	CWE-427 Uncontrolled Search Path Element	CVE-2026-8637	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3812	-		-	-	A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks…	CWE-306 Missing Authentication for Critical Function	CVE-2026-8335	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3813	4.3	MEDIUM Network	-	-	A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite sys…	CWE-749 Exposed Dangerous Method or Function	CVE-2026-7516	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3814	7.0	HIGH Local	-	-	A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-6090	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3815	7.1	HIGH Network	-	-	libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-53689	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3816	9.6	CRITICAL Network	-	-	A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. This flaw allows the attacker…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-53470	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3817	9.1	CRITICAL Network	-	-	A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. T…	CWE-306 Missing Authentication for Critical Function	CVE-2026-53469	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3818	9.9	CRITICAL Network	-	-	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before_request → @jwt_required() (app/rout…	CWE-639 CWE-862 CWE-863 Authorization Bypass Through User-Controlled Key Missing Authorization Incorrect Authorization	CVE-2026-45552	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

3819	9.8	CRITICAL Network	-	-	DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.	CWE-78 OS Command	CVE-2026-38615	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3820	9.8	CRITICAL Network	-	-	A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-36721	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm