Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200401	8.2	重要 Network	BlackBerry	-	BlackBerry Enterprise Server のコアにおける脆弱性	CWE-254 セキュリティ機能	CVE-2016-3128	2017-01-30 11:58	2016-03-11	Show	GitHub Exploit DB Packet Storm

200402	6.1	警告 Network	OpenStack	-	Gerrit 用 Openstack Puppet モジュールの Gerrit 設定におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-5737	2017-01-30 11:50	2016-06-22	Show	GitHub Exploit DB Packet Storm

200403	5.9	警告 Network	Ignite Realtime Fedora Project	-	Smack の XMPP ライブラリにおける TLS の保護を回避される脆弱性	CWE-362 競合状態	CVE-2016-10027	2017-01-30 11:40	2016-11-22	Show	GitHub Exploit DB Packet Storm

200404	7.5	重要 Network	Cloud Foundry Foundation	-	Cloud Foundry Foundation における認証情報のログを作成される脆弱性	CWE-200 情報漏えい	CVE-2016-9882	2017-01-30 11:38	2016-12-16	Show	GitHub Exploit DB Packet Storm

200405	9.8	緊急 Network	Artifex Software	-	Artifex Software MuJS の regexp.c の regemit 関数における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2016-10141	2017-01-30 11:10	2016-12-20	Show	GitHub Exploit DB Packet Storm

200406	7.5	重要 Network	OTR	-	Gajim 用 OTR プラグインにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-9107	2017-01-30 11:08	2016-10-9	Show	GitHub Exploit DB Packet Storm

200407	8	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Virtual Traffic Manager におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-8201	2017-01-30 10:58	2016-09-13	Show	GitHub Exploit DB Packet Storm

200408	5.5	警告 Local	LG Electronics	-	MTK チップセットを使用する LG デバイスのにおける任意のサードパーティアプリケーションにアクセスされる脆弱性	CWE-200 情報漏えい	CVE-2016-10135	2017-01-30 10:46	2016-11-17	Show	GitHub Exploit DB Packet Storm

200409	8.8	重要 Network	MetalGenix	-	GeniXCMS のメディアリネーム機能におけるファイルをリネームされる脆弱性	CWE-19 データ処理	CVE-2017-5520	2017-01-30 10:44	2017-01-13	Show	GitHub Exploit DB Packet Storm

200410	7.4	重要 Network	MetalGenix	-	GeniXCMS のメディアファイルアップロード機能における SSRF 攻撃を実行される脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2017-5518	2017-01-30 10:44	2017-01-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2691	7.3	HIGH Network	-	-	A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer ove…	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-9605	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2692	6.3	MEDIUM Network	-	-	A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can …	CWE-266 CWE-284 Incorrect Privilege Assignment Improper Access Control	CVE-2026-9581	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2693	7.5	HIGH Network	archive\	\	Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), …	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-9538	2026-05-28 23:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

2694	7.5	HIGH Network	-	-	The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.	CWE-524 Use of Cache Containing Sensitive Information	CVE-2026-48901	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2695	7.8	HIGH Local	-	-	A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker ca…	CWE-787 Out-of-bounds Write	CVE-2026-48864	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2696	7.7	HIGH Network	-	-	Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking the IP blacklist, …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45715	2026-05-28 23:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2697	10.0	CRITICAL Network	-	-	Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds to 0.0.0.0:6664 by de…	CWE-15 CWE-78 CWE-306 External Control of System or Configuration Setting OS Command Missing Authentication for Critical Function	CVE-2026-45087	2026-05-28 23:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2698	5.0	MEDIUM Network	-	-	Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash strings in four separate …	CWE-78 CWE-1336 OS Command Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-44723	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2699	7.9	HIGH Local	-	-	pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption…	CWE-59 CWE-287 Link Following Improper Authentication	CVE-2026-44711	2026-05-28 23:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2700	7.5	HIGH Network	archive\	\	Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory. _make_special_file() passes the tar header's linkname to link() without va…	CWE-59 CWE-732 Link Following Incorrect Permission Assignment for Critical Resource	CVE-2026-42497	2026-05-28 23:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed