Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195411 9.8 緊急
Network 		Unicon Software - eLux RP におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2017-7977 2017-09-1 16:39 2017-06-26 Show GitHub Exploit DB Packet Storm
195412 5.4 警告
Network 		Loomio Cooperative Limited - Loomio におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-11594 2017-09-1 16:39 2017-06-9 Show GitHub Exploit DB Packet Storm
195413 5.4 警告
Network 		SAP - SAP NetWeaver AS JAVA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-11458 2017-09-1 16:30 2017-04-11 Show GitHub Exploit DB Packet Storm
195414 6.5 警告
Network 		ownCloud - ownCloud Server における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-9340 2017-09-1 16:06 2017-05-31 Show GitHub Exploit DB Packet Storm
195415 5.3 警告
Network 		ownCloud - ownCloud Server における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-9339 2017-09-1 16:06 2017-05-31 Show GitHub Exploit DB Packet Storm
195416 6.5 警告
Network 		NetApp - NetApp Clustered Data ONTAP における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-7947 2017-09-1 16:06 2017-07-14 Show GitHub Exploit DB Packet Storm
195417 8.8 重要
Network 		Spice Project - spice におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-7506 2017-09-1 16:06 2017-05-19 Show GitHub Exploit DB Packet Storm
195418 5.7 警告
Network 		Octopus Deploy Pty. Ltd. - Octopus Deploy におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-11348 2017-09-1 16:06 2017-07-11 Show GitHub Exploit DB Packet Storm
195419 7.1 重要
Local 		xmlsec project - xmlsec における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2017-1000061 2017-09-1 16:06 2017-04-7 Show GitHub Exploit DB Packet Storm
195420 9.8 緊急
Network 		Akeneo - Akeneo PIM CE および EE におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2017-1000009 2017-09-1 16:06 2017-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
841 5.3 MEDIUM
Network 		- - An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-40211 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
842 3.7 LOW
Network 		- - An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend … New CWE-115
 Misinterpretation of Input 		CVE-2026-42004 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
843 5.3 MEDIUM
Network 		- - An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation. New CWE-20
 Improper Input Validation  		CVE-2026-42390 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
844 5.9 MEDIUM
Network 		- - Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail. New CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-52690 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
845 4.7 MEDIUM
Network 		google chrome Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.… New CWE-346
 Origin Validation Error 		CVE-2026-13034 2026-06-26 00:23 2026-06-25 Show GitHub Exploit DB Packet Storm
846 6.5 MEDIUM
Network 		- - Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. New CWE-862
 Missing Authorization 		CVE-2026-57619 2026-06-26 00:16 2026-06-25 Show GitHub Exploit DB Packet Storm
847 6.5 MEDIUM
Network 		- - Contributor Broken Access Control in Slim SEO <= 4.6.2 versions. New CWE-862
 Missing Authorization 		CVE-2026-57429 2026-06-26 00:16 2026-06-25 Show GitHub Exploit DB Packet Storm
848 7.1 HIGH
Network 		- - An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an att… New CWE-787
 Out-of-bounds Write 		CVE-2026-56209 2026-06-26 00:16 2026-06-20 Show GitHub Exploit DB Packet Storm
849 7.6 HIGH
Network 		- - A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer … New CWE-122
Heap-based Buffer Overflow 		CVE-2026-56208 2026-06-26 00:16 2026-06-20 Show GitHub Exploit DB Packet Storm
850 7.7 HIGH
Network 		- - Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions. New CWE-22
Path Traversal 		CVE-2026-56054 2026-06-26 00:16 2026-06-25 Show GitHub Exploit DB Packet Storm