Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195981	9.8	緊急 Network	ARRIS Group シスコシステムズ	-	複数の Cisco DPC 製品および Arris TG1682G におけるセキュリティ機能に関する脆弱性	CWE-254 セキュリティ機能	CVE-2017-9521	2017-08-30 11:50	2017-07-30	Show	GitHub Exploit DB Packet Storm

195982	7.5	重要 Network	ARRIS Group シスコシステムズ	-	複数の Cisco DPC 製品および Arris TG1682G における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-9492	2017-08-30 11:50	2017-07-30	Show	GitHub Exploit DB Packet Storm

195983	5.3	警告 Network	ARRIS Group シスコシステムズ	-	複数の Cisco DPC 製品および Arris TG1682G における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-9491	2017-08-30 11:50	2017-07-30	Show	GitHub Exploit DB Packet Storm

195984	7.5	重要 Network	シスコシステムズ	-	Cisco DPC3939 における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-9478	2017-08-30 11:50	2017-07-30	Show	GitHub Exploit DB Packet Storm

195985	6.5	警告 Adjacent	シスコシステムズ	-	Cisco DPC3939 における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-9477	2017-08-30 11:50	2017-07-30	Show	GitHub Exploit DB Packet Storm

195986	6.5	警告 Adjacent	ARRIS Group シスコシステムズ	-	Cisco DPC3939 および Arris TG1682G における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2017-9476	2017-08-30 11:50	2017-07-30	Show	GitHub Exploit DB Packet Storm

195987	9.1	緊急 Network	Apache Software Foundation	-	Apache Wicket の DiskFileItem クラスにおける信頼性のないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2016-6793	2017-08-30 11:46	2016-12-31	Show	GitHub Exploit DB Packet Storm

195988	7.5	重要 Network	ImageMagick	-	ImageMagick におけるリソース管理に関する脆弱性	CWE-399 リソース管理の問題	CVE-2017-12435	2017-08-30 11:39	2017-07-6	Show	GitHub Exploit DB Packet Storm

195989	6.5	警告 Network	ImageMagick	-	ImageMagick における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-12434	2017-08-30 11:39	2017-07-6	Show	GitHub Exploit DB Packet Storm

195990	6.5	警告 Network	ImageMagick	-	ImageMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-12433	2017-08-30 11:38	2017-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
751	5.5	MEDIUM Local	gpac	gpac	GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service (local). The component is: filter_c… New	CWE-122 Heap-based Buffer Overflow	CVE-2025-60468	2026-06-27 04:56	2026-06-25	Show	GitHub Exploit DB Packet Storm

752	5.3	MEDIUM Network	fastapiexpert	python-multipart	Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, parse_options_header parsed Content-Disposition (and Content-Type) headers with email.message.Message, which transparentl… New	CWE-20 CWE-436 Improper Input Validation Interpretation Conflict	CVE-2026-53537	2026-06-27 04:54	2026-06-23	Show	GitHub Exploit DB Packet Storm

753	3.7	LOW Network	fastapiexpert	python-multipart	Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, QuerystringParser treated ; as a field separator in application/x-www-form-urlencoded bodies, in addition to &. The WHATW… New	CWE-436 CWE-444 Interpretation Conflict HTTP Request Smuggling	CVE-2026-53538	2026-06-27 04:52	2026-06-23	Show	GitHub Exploit DB Packet Storm

754	7.5	HIGH Network	fastapiexpert	python-multipart	Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator with a two step look… New	CWE-400 CWE-407 Uncontrolled Resource Consumption Inefficient Algorithmic Complexity	CVE-2026-53539	2026-06-27 04:50	2026-06-23	Show	GitHub Exploit DB Packet Storm

755	9.9	CRITICAL Network	appsmith	appsmith	Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has no authentication by default — is bound on 0.0.0.0:… New	CWE-749 CWE-1188 Exposed Dangerous Method or Function Insecure Default Initialization of Resource	CVE-2026-55454	2026-06-27 04:50	2026-06-25	Show	GitHub Exploit DB Packet Storm

756	3.7	LOW Network	fastapiexpert	python-multipart	Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A … New	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-53540	2026-06-27 04:50	2026-06-23	Show	GitHub Exploit DB Packet Storm

757	7.2	HIGH Network	appsmith	appsmith	Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from outside the contai… New	CWE-183 CWE-918 Permissive List of Allowed Inputs Server-Side Request Forgery (SSRF)	CVE-2026-50189	2026-06-27 04:50	2026-06-25	Show	GitHub Exploit DB Packet Storm

758	9.1	CRITICAL Network	appsmith	appsmith	Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the outbound HTTP host filter applied by WebClientUtils (used by the REST API and GraphQL datasource plugin… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-55455	2026-06-27 04:50	2026-06-25	Show	GitHub Exploit DB Packet Storm

759	6.1	MEDIUM Network	angularjs	angularjs	Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15 20.3.22, and 19.2.23, an issue in the… New	CWE-200 CWE-441 CWE-524 Information Exposure Confused Deputy Use of Cache Containing Sensitive Information	CVE-2026-50169	2026-06-27 04:40	2026-06-23	Show	GitHub Exploit DB Packet Storm

760	7.5	HIGH Network	aiohttp	aiohttp	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to modify a request to i… New	CWE-93 CWE-113 CRLF Injection HTTP Response Splitting	CVE-2026-50269	2026-06-27 04:39	2026-06-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed