Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196041 5.4 警告
Network 		Craft CMS - Craft CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-9516 2017-07-3 16:32 2017-06-7 Show GitHub Exploit DB Packet Storm
196042 5.6 警告
Local 		Fabrice Bellard - QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-9330 2017-07-3 16:32 2017-02-21 Show GitHub Exploit DB Packet Storm
196043 5.6 警告
Local 		Fabrice Bellard - QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-9310 2017-07-3 16:32 2017-02-15 Show GitHub Exploit DB Packet Storm
196044 5.4 警告
Network 		Vindula - Vindula におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6959 2017-07-3 16:31 2015-09-7 Show GitHub Exploit DB Packet Storm
196045 7.8 重要
Local 		VMware - VMware Workstation および Horizon View Client における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2017-4913 2017-07-3 16:24 2017-04-18 Show GitHub Exploit DB Packet Storm
196046 7.8 重要
Local 		VMware - VMware Workstation および Horizon View Client における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-4912 2017-07-3 16:24 2017-04-18 Show GitHub Exploit DB Packet Storm
196047 7.8 重要
Local 		VMware - VMware Workstation および Horizon View Client における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2017-4911 2017-07-3 16:24 2017-04-18 Show GitHub Exploit DB Packet Storm
196048 7.8 重要
Local 		VMware - VMware Workstation および Horizon View Client における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-4910 2017-07-3 16:24 2017-04-18 Show GitHub Exploit DB Packet Storm
196049 7.8 重要
Local 		VMware - VMware Workstation および Horizon View Client におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-4909 2017-07-3 16:24 2017-04-18 Show GitHub Exploit DB Packet Storm
196050 7.8 重要
Local 		VMware - VMware Workstation および Horizon View Client におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-4908 2017-07-3 16:24 2017-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3281 6.8 MEDIUM
Network 		gradio_project gradio Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across… CWE-384
 Session Fixation 		CVE-2026-48545 2026-06-2 09:34 2026-05-28 Show GitHub Exploit DB Packet Storm
3282 5.5 MEDIUM
Local 		- - A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a … CWE-476
 NULL Pointer Dereference 		CVE-2025-60495 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3283 5.5 MEDIUM
Local 		- - A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 file. CWE-416
 Use After Free 		CVE-2025-60486 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3284 5.5 MEDIUM
Local 		- - A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a cr… CWE-476
 NULL Pointer Dereference 		CVE-2025-60485 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3285 5.5 MEDIUM
Local 		- - A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) … CWE-476
 NULL Pointer Dereference 		CVE-2025-60483 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3286 5.5 MEDIUM
Local 		- - A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted… CWE-476
 NULL Pointer Dereference 		CVE-2025-60481 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3287 5.5 MEDIUM
Local 		- - A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-122
Heap-based Buffer Overflow 		CVE-2025-55664 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3288 8.1 HIGH
Network 		- - LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, the setup database configuration flow on uninitialized LinkAce instances accepts attacker-controlled database credential fie… CWE-74
Injection 		CVE-2026-45344 2026-06-2 06:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3289 9.6 CRITICAL
Network 		- - CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool executes cargo test in the workspace with ApprovalRequirement::Auto, meaning it runs without any user… CWE-94
Code Injection 		CVE-2026-45311 2026-06-2 06:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3290 7.3 HIGH
Network 		- - Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary files and achieve remo… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-39292 2026-06-2 06:16 2026-05-30 Show GitHub Exploit DB Packet Storm