Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 12:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198651	5	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-2102	2017-06-1 11:31	2017-02-9	Show	GitHub Exploit DB Packet Storm

198652	7.3	重要 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat における認証不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-2101	2017-06-1 11:31	2017-02-9	Show	GitHub Exploit DB Packet Storm

198653	6.3	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat における DNS リバインディングの脆弱性	CWE-Other その他	CVE-2017-2100	2017-06-1 11:31	2017-02-9	Show	GitHub Exploit DB Packet Storm

198654	6.3	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat において任意のコードが実行可能な脆弱性	CWE-94 コード・インジェクション	CVE-2017-2099	2017-06-1 11:31	2017-02-9	Show	GitHub Exploit DB Packet Storm

198655	5	警告 Network	CubeCart Limited	-	CubeCart におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-2098	2017-06-1 11:31	2017-01-27	Show	GitHub Exploit DB Packet Storm

198656	6.1	警告 Network	アドビシステムズ日立	-	Adobe RoboHelp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-7891	2017-05-31 19:46	2016-12-13	Show	GitHub Exploit DB Packet Storm

198657	7.2	重要 Network	ブルーコートシステムズ	-	SSL Visibility Appliance における RST パケットの生成に関する問題	CWE-Other その他	CVE-2016-10259	2017-05-31 19:15	2017-05-24	Show	GitHub Exploit DB Packet Storm

198658	5.4	警告 Network	Todd Austin	-	Canvas におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-8298	2017-05-31 18:41	2017-04-23	Show	GitHub Exploit DB Packet Storm

198659	7.5	重要 Network	VirusTotal	-	YARA の regex コンポーネントの libyara/re.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-125 境界外読み取り	CVE-2017-8294	2017-05-31 18:35	2017-04-27	Show	GitHub Exploit DB Packet Storm

198660	4.8	警告 Network	アップル	-	Apple iOS の Find My iPhone におけるデバイスをワイプされる脆弱性	CWE-254 セキュリティ機能	CVE-2010-1776	2017-05-31 18:17	2010-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
701	7.5	HIGH Network	openssl	openssl	Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a …	CWE-476 NULL Pointer Dereference	CVE-2026-42765	2026-06-16 03:14	2026-06-10	Show	GitHub Exploit DB Packet Storm

702	7.5	HIGH Network	openssl	openssl	Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platfo…	CWE-125 Out-of-bounds Read	CVE-2026-34180	2026-06-16 03:13	2026-06-10	Show	GitHub Exploit DB Packet Storm

703	7.4	HIGH Network	openssl	openssl	Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certifi…	CWE-354 Improper Validation of Integrity Check Value	CVE-2026-34181	2026-06-16 03:13	2026-06-10	Show	GitHub Exploit DB Packet Storm

704	9.1	CRITICAL Network	openssl	openssl	Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various pot…	CWE-354 Improper Validation of Integrity Check Value	CVE-2026-34182	2026-06-16 03:13	2026-06-10	Show	GitHub Exploit DB Packet Storm

705	7.5	HIGH Network	openssl	openssl	Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unb…	CWE-1325 Improperly Controlled Sequential Memory Allocation	CVE-2026-34183	2026-06-16 03:12	2026-06-10	Show	GitHub Exploit DB Packet Storm

706	5.0	MEDIUM Network	openssl	openssl	Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the client's certificate verificatio…	CWE-415 Double Free	CVE-2026-35188	2026-06-16 03:12	2026-06-10	Show	GitHub Exploit DB Packet Storm

707	5.7	MEDIUM Adjacent	nuxt	nuxt\/rspack-builder nuxt\/webpack-builder	Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder from versions 3.15.4 to before 3.21.7 and 4.0.0 to before 4.4.7, there is an incomplete …	CWE-749 Exposed Dangerous Method or Function	CVE-2026-49993	2026-06-16 03:10	2026-06-12	Show	GitHub Exploit DB Packet Storm

708	9.8	CRITICAL Network	jmespath	jmespath	jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP applications with PHP data structures. Versions prior to 2.9.1 ca…	CWE-20 CWE-94 CWE-116 Improper Input Validation Code Injection Improper Encoding or Escaping of Output	CVE-2026-54133	2026-06-16 03:09	2026-06-13	Show	GitHub Exploit DB Packet Storm

709	5.4	MEDIUM Network	nuxt	nuxt	Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6, navigateTo() with external: true generates a server-side HTML redi…	CWE-83 Improper Neutralization of Script in Attributes in a Web Page	CVE-2026-45669	2026-06-16 03:09	2026-06-12	Show	GitHub Exploit DB Packet Storm

710	5.3	MEDIUM Network	nuxt	nuxt nuxt\/nitro-server	Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to before 3.21.6 and 4.0…	CWE-284 CWE-288 Improper Access Control Authentication Bypass Using an Alternate Path or Channel	CVE-2026-47200	2026-06-16 03:09	2026-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed