Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200051	6.1	警告 Network	Dotclear	-	Dotclear におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-6446	2017-03-24 16:07	2017-03-1	Show	GitHub Exploit DB Packet Storm

200052	9.8	緊急 Network	Flexense Ltd.	-	SysGauge におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-6416	2017-03-24 15:49	2017-03-5	Show	GitHub Exploit DB Packet Storm

200053	7.5	重要 Network	Irssi	-	Irssi におけるサービス運用妨害 (DoS) の脆弱性	CWE-125 境界外読み取り	CVE-2017-5356	2017-03-24 14:39	2017-01-3	Show	GitHub Exploit DB Packet Storm

200054	7.5	重要 Network	Irssi	-	Irssi におけるサービス運用妨害 (DoS) の脆弱性	CWE-125 境界外読み取り	CVE-2017-5196	2017-03-24 14:39	2017-01-3	Show	GitHub Exploit DB Packet Storm

200055	7.5	重要 Network	Irssi	-	Irssi におけるサービス運用妨害 (DoS) の脆弱性	CWE-125 境界外読み取り	CVE-2017-5195	2017-03-24 14:39	2017-01-3	Show	GitHub Exploit DB Packet Storm

200056	7.5	重要 Network	Irssi	-	Irssi におけるサービス運用妨害 (DoS) の脆弱性	CWE-416 解放済みメモリの使用	CVE-2017-5194	2017-03-24 14:39	2017-01-3	Show	GitHub Exploit DB Packet Storm

200057	7.5	重要 Network	Irssi	-	Irssi の nickcmp 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-5193	2017-03-24 14:39	2017-01-3	Show	GitHub Exploit DB Packet Storm

200058	7.5	重要 Network	Wireshark	-	Wireshark の epan/dissectors/packet-wsp.c における無限ループを引き起こされる脆弱性	CWE-20 不適切な入力確認	CVE-2017-6471	2017-03-24 14:38	2017-03-3	Show	GitHub Exploit DB Packet Storm

200059	7.8	重要 Local	サムスンクアルコム	-	特定のクアルコム製チップセットを伴う Android を搭載した Samsung デバイスにおける脆弱性	CWE-20 不適切な入力確認	CVE-2016-4038	2017-03-24 14:37	2016-04-18	Show	GitHub Exploit DB Packet Storm

200060	6.1	警告 Network	sivann	-	IT ITems DataBase (ITDB) における任意の HTML およびスクリプトコードを実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-10216	2017-03-24 14:35	2016-11-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3671	6.3	MEDIUM Network	-	-	A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. This impacts the function getAssetMetadata of the file src/mcp-server.ts of the comp…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-10274	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3672	5.0	MEDIUM Network	-	-	A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation …	CWE-119 CWE-120 Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow	CVE-2026-10275	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3673	6.5	MEDIUM Network	-	-	Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.	CWE-862 Missing Authorization	CVE-2026-42671	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3674	9.3	CRITICAL Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection. This issue affects WP Directory Ki…	CWE-89 SQL Injection	CVE-2026-42672	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3675	7.5	HIGH Network	-	-	Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensit…	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2026-42673	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3676	7.5	HIGH Network	-	-	Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding. This issue affects Advanced Access Manager: from n/a through 7.1.0.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-42674	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3677	7.3	HIGH Network	-	-	Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41.	CWE-862 Missing Authorization	CVE-2026-42675	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3678	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stored XSS. This issue affects myCred: from n/a through 3.0.4.	CWE-79 Cross-site Scripting	CVE-2026-42676	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3679	7.5	HIGH Network	-	-	Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Document Revisions: from n/a be…	CWE-862 Missing Authorization	CVE-2026-42677	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

3680	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through …	CWE-79 Cross-site Scripting	CVE-2026-42678	2026-06-2 02:57	2026-06-2	Show	GitHub Exploit DB Packet Storm