Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197411 7.5 重要
Network 		アップル - Apple iOS の Phone コンポーネントにおける任意の番号に発信される脆弱性 CWE-254
セキュリティ機能 		CVE-2017-2484 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197412 4.6 警告
Physics 		アップル - Apple iOS の Siri コンポーネントにおけるロック画面のテキストメッセージを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2017-2452 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197413 9.8 緊急
Network 		アップル - Apple iOS の HomeKit コンポーネントにおける脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2434 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197414 5.3 警告
Network 		アップル - Apple iOS の DataAccess コンポーネントにおける Exchange トラフィックにアクセスされる脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2414 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197415 7.5 重要
Network 		アップル - Apple iOS のクイックルックコンポーネントにおける任意の番号に電話が発信される脆弱性 CWE-254
セキュリティ機能 		CVE-2017-2404 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197416 5.3 警告
Network 		アップル - Apple iOS の SafariViewController コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-2400 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197417 4.6 警告
Physics 		アップル - Apple iOS のペーストボードコンポーネントにおけるペーストボードを読まれる脆弱性 CWE-320
鍵管理のエラー 		CVE-2017-2399 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197418 6.1 警告
Network 		アップル - Apple iOS の Safari リーダーコンポーネントにおけるユニバーサルクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-2393 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197419 3.3 低
Local 		アップル - Apple iOS の Safari コンポーネントにおけるプライベートブラウズモードでユーザが閲覧した Web サイトを特定される脆弱性 CWE-200
情報漏えい 		CVE-2017-2384 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
197420 7.5 重要
Network 		アップル - Apple iOS のプロファイルコンポーネントの Simple Certificate Enrollment Protocol における暗号保護メカニズムを回避される脆弱性 CWE-326
不適切な暗号強度 		CVE-2017-2380 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2161 5.3 MEDIUM
Network 		concretecms concrete_cms Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would have to be configured in such a way that both public and private surveys are present on the site. An unau… CWE-565
CWE-639
 Reliance on Cookies without Validation and Integrity Checking
 Authorization Bypass Through User-Controlled Key 		CVE-2026-8337 2026-05-27 02:13 2026-05-22 Show GitHub Exploit DB Packet Storm
2162 9.8 CRITICAL
Network 		- - A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipul… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9543 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2163 3.3 LOW
Local 		- - A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a mani… CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2026-9530 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2164 3.3 LOW
Local 		- - A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bou… CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2026-9504 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2165 - - - IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service … CWE-476
 NULL Pointer Dereference 		CVE-2026-8479 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2166 - - - FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow_v9_collector.cpp, the Data template bra… - CVE-2026-48683 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2167 7.6 HIGH
Network 		- - Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to 0.32.0 affecting redirect-following proces… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45082 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2168 6.2 MEDIUM
Local 		- - In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a crafted TFLite model file to bypass buffer size validation and trigger a heap-based … CWE-190
 Integer Overflow or Wraparound 		CVE-2026-42627 2026-05-27 01:16 2026-05-23 Show GitHub Exploit DB Packet Storm
2169 - - - An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-l… - CVE-2026-38587 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2170 7.0 HIGH
Local 		samba rsync Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replac… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-29518 2026-05-27 01:16 2026-05-20 Show GitHub Exploit DB Packet Storm