Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194931	9.1	緊急 Network	Avahi	-	Avahi の avahi-daemon におけるサービス運用妨害 (DoS) の脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-6519	2017-06-5 17:17	2017-02-24	Show	GitHub Exploit DB Packet Storm

194932	7.8	重要 Local	Google Linux	-	NVIDIA ビデオドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-0331	2017-06-5 17:08	2017-05-1	Show	GitHub Exploit DB Packet Storm

194933	4.7	警告 Local	Irfan Skiljan	-	IrfanView における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-7721	2017-06-5 16:54	2017-04-30	Show	GitHub Exploit DB Packet Storm

194934	8.1	重要 Network	Kozea Project	-	Radicale における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2017-8342	2017-06-5 16:54	2017-04-19	Show	GitHub Exploit DB Packet Storm

194935	5.4	警告 Network	MetalGenix	-	GeniXCMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-8762	2017-06-5 16:52	2017-05-4	Show	GitHub Exploit DB Packet Storm

194936	4	警告 Local	IBM	-	IBM Tealeaf Customer Experience における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2016-0382	2017-06-5 16:49	2017-04-28	Show	GitHub Exploit DB Packet Storm

194937	6.8	警告 Network	Schneider Electric	-	Schneider Electric StruxureWare Data Center Expert における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2017-8371	2017-06-5 16:47	2017-01-20	Show	GitHub Exploit DB Packet Storm

194938	5.5	警告 Local	Telegram Desktop	-	Telegram Desktop における重要な認証情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-10351	2017-06-5 16:47	2016-11-23	Show	GitHub Exploit DB Packet Storm

194939	6.1	警告 Network	NetIQ Novell	-	Novell iManager および NetIQ iManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-7430	2017-06-5 16:41	2017-05-1	Show	GitHub Exploit DB Packet Storm

194940	8.6	重要 Network	IBM	-	IBM WebSphere Cast Iron Solution における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2016-9692	2017-06-5 16:26	2016-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2381	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check public/private permissions which allows members without these permissions to access public playbooks via /get…	CWE-863 Incorrect Authorization	CVE-2026-6343	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2382	6.5	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a user via the use of som…	CWE-522 Insufficiently Protected Credentials	CVE-2026-6345	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2383	6.4	MEDIUM Network	-	-	Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows authenticated attackers to inject malicious HTML and JavaScript code. Attackers…	CWE-79 Cross-site Scripting	CVE-2021-47962	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

2384	7.2	HIGH Network	-	-	Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to execute arbitrary code by injecting malicious payloads into markdown files stored within the application. A…	CWE-79 Cross-site Scripting	CVE-2021-47963	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

2385	6.4	MEDIUM Network	-	-	Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_des…	CWE-79 Cross-site Scripting	CVE-2021-47968	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

2386	8.8	HIGH Network	-	-	HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-37227	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2387	7.8	HIGH Local	-	-	Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Atta…	CWE-428 Unquoted Search Path or Element	CVE-2020-37232	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2388	6.4	MEDIUM Network	-	-	Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user creation fields. Attackers can ins…	CWE-79 Cross-site Scripting	CVE-2020-37240	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2389	8.2	HIGH Network	-	-	Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parame…	CWE-89 SQL Injection	CVE-2020-37242	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm

2390	8.2	HIGH Network	-	-	Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl acti…	CWE-89 SQL Injection	CVE-2020-37243	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm