Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194451 5.5 警告
Local 		Fabrice Bellard - QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2017-9373 2017-07-7 16:25 2017-03-16 Show GitHub Exploit DB Packet Storm
194452 5.5 警告
Local 		Linux - Linux Kernel の sound/core/timer.c における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-1000380 2017-07-7 16:24 2017-06-14 Show GitHub Exploit DB Packet Storm
194453 8.8 重要
Network 		Erik de Castro Lopo - libsndfile におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-6892 2017-07-7 15:05 2017-05-23 Show GitHub Exploit DB Packet Storm
194454 5.5 警告
Local 		シスコシステムズ - Cisco Ultra Services Platform の ConfD サーバにおける重要な情報を閲覧される脆弱性 CWE-200
情報漏えい 		CVE-2017-6695 2017-07-7 14:34 2017-06-7 Show GitHub Exploit DB Packet Storm
194455 5.5 警告
Local 		シスコシステムズ - Cisco Ultra Services Platform の VNFM のログイン機能における重要なデータ を閲覧される脆弱性 CWE-200
情報漏えい 		CVE-2017-6694 2017-07-7 14:34 2017-06-7 Show GitHub Exploit DB Packet Storm
194456 8.8 重要
Network 		シスコシステムズ - Cisco Ultra Services Framework Element Manager における root ユーザの権限でデバイスにログインされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-6692 2017-07-7 14:34 2017-06-7 Show GitHub Exploit DB Packet Storm
194457 8.8 重要
Network 		シスコシステムズ - Cisco Ultra Services Framework Element Manager におけるデフォルトの認証情報を使用してシステムにログインされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-6687 2017-07-7 14:34 2017-06-7 Show GitHub Exploit DB Packet Storm
194458 8.8 重要
Network 		シスコシステムズ - Cisco Ultra Services Framework Element Manager における管理者または oper ユーザとしてログインされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2017-6686 2017-07-7 14:34 2017-06-7 Show GitHub Exploit DB Packet Storm
194459 6.1 警告
Network 		シスコシステムズ - Cisco Industrial Network Director の Web インターフェースにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-6675 2017-07-7 14:34 2017-06-7 Show GitHub Exploit DB Packet Storm
194460 7.5 重要
Network 		シスコシステムズ - Cisco FirePOWER システムソフトウェアの feature-license 管理機能におけるデバイスに設定された URL フィルタを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2017-6674 2017-07-7 14:34 2017-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2811 4.4 MEDIUM
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently ignores EACCES errors when opening /dev/input/event* nodes, causing pusb_has_vi… CWE-390
CWE-693
 Detection of Error Condition Without Action
 Protection Mechanism Failure 		CVE-2026-48792 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2812 4.6 MEDIUM
Physics 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return values of udisks_drive_get_serial(), udisks_drive_get_vendor(), and u… CWE-476
 NULL Pointer Dereference 		CVE-2026-44710 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2813 8.2 HIGH
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such as $(id>/tmp/rce) in the config causes root RCE when pamusb-conf --reset-pads is… CWE-78
CWE-88
OS Command 
Argument Injection 		CVE-2026-44712 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2814 8.8 HIGH
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the user's $TMUX environment variable, splits it on commas, and interpolates the so… CWE-78
CWE-116
OS Command 
 Improper Encoding or Escaping of Output 		CVE-2026-44713 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2815 7.4 HIGH
Network 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remote feature checks utmpx ut_addr_v6 to detect whether an authentication request o… CWE-284
Improper Access Control 		CVE-2026-47269 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2816 6.3 MEDIUM
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM module loaded into the host process (sudo, login, GDM, GNOME Shell). Display manage… CWE-362
Race Condition 		CVE-2026-47270 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2817 6.1 MEDIUM
Network 		apache echarts A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versions prior to 6.1.0,… CWE-79
Cross-site Scripting 		CVE-2026-45249 2026-05-28 22:48 2026-05-25 Show GitHub Exploit DB Packet Storm
2818 6.5 MEDIUM
Network 		apache shiro Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1… CWE-384
 Session Fixation 		CVE-2026-43827 2026-05-28 22:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2819 6.5 MEDIUM
Network 		apache shiro Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommen… CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute 		CVE-2026-43828 2026-05-28 22:45 2026-05-26 Show GitHub Exploit DB Packet Storm
2820 4.3 MEDIUM
Network 		- - The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_… CWE-862
 Missing Authorization 		CVE-2026-4888 2026-05-28 22:45 2026-05-28 Show GitHub Exploit DB Packet Storm