Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196371 5.4 警告
Network 		インフォア - INFOR EAM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-7953 2017-06-16 18:16 2017-05-15 Show GitHub Exploit DB Packet Storm
196372 8.8 重要
Network 		インフォア - INFOR EAM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-7952 2017-06-16 18:16 2017-05-15 Show GitHub Exploit DB Packet Storm
196373 9.8 緊急
Network 		LibRaw - LibRaw-demosaic-pack-GPL2 の dcraw_foveon.c の foveon_load_camf() 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2017-6889 2017-06-16 18:16 2017-03-5 Show GitHub Exploit DB Packet Storm
196374 9.8 緊急
Network 		LibRaw - LibRaw-demosaic-pack-GPL2 におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-6890 2017-06-16 18:05 2017-03-5 Show GitHub Exploit DB Packet Storm
196375 7.5 重要
Network 		シスコシステムズ - Cisco TelePresence Collaboration Endpoint ソフトウェアにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-3825 2017-06-16 18:05 2017-05-3 Show GitHub Exploit DB Packet Storm
196376 8.8 重要
Network 		Simple Invoices - Simple Invoices におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-8930 2017-06-16 18:04 2017-03-21 Show GitHub Exploit DB Packet Storm
196377 7.5 重要
Network 		シスコシステムズ - Cisco IOS XR ルータの Event Management Service デーモンにおけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2017-3876 2017-06-16 18:01 2017-05-3 Show GitHub Exploit DB Packet Storm
196378 9.6 緊急
Adjacent 		シスコシステムズ - Cisco CVR100W Wireless-N VPN Router の Universal Plug-and-Play の実装におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-3882 2017-06-16 17:58 2017-05-3 Show GitHub Exploit DB Packet Storm
196379 6.5 警告
Network 		OpenVPN Technologies - OpenVPN における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-7479 2017-06-16 17:57 2017-05-15 Show GitHub Exploit DB Packet Storm
196380 9.8 緊急
Network 		ZyXEL - Eir D1000 モデムにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-10372 2017-06-16 17:51 2016-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3301 6.3 MEDIUM
Network 		- - FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/src/pool/worker.ts:356 blocks dynamic import() with the regex /\bimport\s*\(/.t… CWE-94
CWE-184
Code Injection
 Incomplete Blacklist 		CVE-2026-44287 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3302 7.5 HIGH
Network 		- - xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint that allows unauthenticated attackers to read arbitrary files outside the intende… CWE-22
Path Traversal 		CVE-2026-10108 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3303 7.3 HIGH
Network 		- - A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument roll results in… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10110 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3304 7.3 HIGH
Network 		- - A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can lead to sql injectio… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10111 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3305 2.4 LOW
Network 		- - A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site s… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-10112 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3306 4.3 MEDIUM
Network 		- - A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. The manip… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-10113 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3307 7.5 HIGH
Network 		- - The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and including, 5.26.0 via the ev… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2026-7459 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3308 4.3 MEDIUM
Network 		- - A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_sbi_xact_add in the library /lib/core/ogs-timer.c of the component ue-authentications Endpoint.… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-10116 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3309 4.3 MEDIUM
Network 		- - A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a manipulation can lead to denial of serv… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-10117 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3310 8.8 HIGH
Network 		- - The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible f… CWE-269
 Improper Privilege Management 		CVE-2026-7465 2026-06-2 00:16 2026-05-30 Show GitHub Exploit DB Packet Storm