Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198471	5.5	警告 Local	radare	-	radare2 の wasm.c の consume_init_expr 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2017-7854	2017-05-17 17:35	2017-04-13	Show	GitHub Exploit DB Packet Storm

198472	6.1	警告 Network	コンクリートファイブ	-	concrete5 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-7725	2017-05-17 17:31	2017-04-12	Show	GitHub Exploit DB Packet Storm

198473	9.8	緊急 Network	SAP	-	SAP Business Intelligence プラットフォームにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-6818	2017-05-17 17:27	2016-08-12	Show	GitHub Exploit DB Packet Storm

198474	9.8	緊急 Network	SAP	-	SAP HANA DB における任意のコードを実行される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-6143	2017-05-17 17:27	2016-07-1	Show	GitHub Exploit DB Packet Storm

198475	9.8	緊急 Network	Google	-	Nexus 6 および Android One デバイス上で稼動する Android の Qualcomm コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2016-6726	2017-05-17 17:13	2016-11-7	Show	GitHub Exploit DB Packet Storm

198476	4	警告	株式会社アイ・オー・データ機器	-	RockDisk におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3887	2017-05-17 17:06	2014-07-2	Show	GitHub Exploit DB Packet Storm

198477	7.5	重要 Network	Moxa Inc.	-	Moxa MXView におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2017-7456	2017-05-17 16:52	2017-04-9	Show	GitHub Exploit DB Packet Storm

198478	7.5	重要 Network	Moxa Inc.	-	Moxa MXView における Web サーバの秘密鍵ファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2017-7455	2017-05-17 16:51	2017-04-9	Show	GitHub Exploit DB Packet Storm

198479	7.5	重要 Network	Moxa Inc.	-	Moxa AWK-3131A Wireless AP における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2016-8727	2017-05-17 16:51	2016-10-17	Show	GitHub Exploit DB Packet Storm

198480	7.5	重要 Network	Moxa Inc.	-	Moxa AWK-3131A Wireless AP における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-8726	2017-05-17 16:51	2016-10-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3171	7.7	HIGH Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-46447	2026-06-5 03:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

3172	4.9	MEDIUM Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-44917	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

3173	8.1	HIGH Network	openstack	ironic	OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.	CWE-23 Relative Path Traversal	CVE-2026-48681	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

3174	5.9	MEDIUM Local	libexpat_project	libexpat	libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.…	CWE-416 Use After Free	CVE-2026-50219	2026-06-5 03:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

3175	7.5	HIGH Network	solarwinds	web_help_desk	SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-28299	2026-06-5 03:39	2026-06-3	Show	GitHub Exploit DB Packet Storm

3176	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain…	CWE-209 Information Exposure Through an Error Message	CVE-2025-52606	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

3177	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path…	CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute	CVE-2025-52608	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

3178	4.3	MEDIUM Network	mozilla	firefox	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.	CWE-843 Type Confusion	CVE-2026-10702	2026-06-5 03:38	2026-06-3	Show	GitHub Exploit DB Packet Storm

3179	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-125 Out-of-bounds Read	CVE-2026-46344	2026-06-5 03:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

3180	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2026-44518	2026-06-5 03:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed