Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200731 7.3 重要
Network 		KDE project
Debian
SUSE
Fedora Project		 - KMail におけるプレーンテキストビューアに HTML コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-7966 2017-01-10 14:04 2016-10-6 Show GitHub Exploit DB Packet Storm
200732 4.9 警告
Network 		KDE project
openSUSE project
SUSE		 - kdesu におけるスーパーユーザとしてコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-7787 2017-01-10 13:58 2016-09-9 Show GitHub Exploit DB Packet Storm
200733 6.8 警告
Physics 		KDE project
openSUSE project
Fedora Project		 - plasma-workspace および kscreenlocker におけるスクリーンロックが解除される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-2312 2017-01-10 13:58 2016-02-9 Show GitHub Exploit DB Packet Storm
200734 7 重要
Local 		ImageMagick - ImageMagick の変換ユーティリティにおける境界外書き込みの脆弱性 CWE-787
境界外書き込み 		CVE-2016-8707 2017-01-10 12:02 2016-12-3 Show GitHub Exploit DB Packet Storm
200735 6.5 警告
Network 		シスコシステムズ - Cisco Jabber Guest Server における任意のホストへの接続を開始される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-9224 2017-01-6 17:46 2016-12-21 Show GitHub Exploit DB Packet Storm
200736 9.8 緊急
Network 		シスコシステムズ - Cisco CloudCenter Orchestrator の Docker Engine における高い権限を持つ Docker コンテナをインストールされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9223 2017-01-6 17:46 2016-12-21 Show GitHub Exploit DB Packet Storm
200737 8.8 重要
Network 		シスコシステムズ - Cisco Intercloud Fabric for Business および for Providers における本製品が使用するデータベースへ接続される脆弱性 CWE-285
不適切な認可 		CVE-2016-9217 2017-01-6 17:46 2016-12-21 Show GitHub Exploit DB Packet Storm
200738 6.1 警告
Network 		OWASP AntiSamy Project - OWASP AntiSamy におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-10006 2017-01-6 17:02 2016-12-19 Show GitHub Exploit DB Packet Storm
200739 5.4 警告
Network 		s9y - Serendipity におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9681 2017-01-6 16:56 2016-11-28 Show GitHub Exploit DB Packet Storm
200740 7.3 重要
Network 		MODX - MODX Revolution の /connectors/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-10039 2017-01-6 16:49 2016-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 6.5 MEDIUM
Adjacent 		- - BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to read arbitrary files.… New CWE-22
Path Traversal 		CVE-2026-49144 2026-06-5 01:10 2026-06-3 Show GitHub Exploit DB Packet Storm
142 5.9 MEDIUM
Network 		- - QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by exploiting the use of MD5 for password ha… New CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2026-25861 2026-06-5 01:10 2026-06-3 Show GitHub Exploit DB Packet Storm
143 3.6 LOW
Local 		- - A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the component DataFrame Hash Han… New CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash 		CVE-2026-10766 2026-06-5 01:10 2026-06-4 Show GitHub Exploit DB Packet Storm
144 5.3 MEDIUM
Network 		- - OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's email address. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-10597 2026-06-5 01:10 2026-06-4 Show GitHub Exploit DB Packet Storm
145 4.3 MEDIUM
Network 		- - A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL … New CWE-400
CWE-404
 Uncontrolled Resource Consumption
 Improper Resource Shutdown or Release 		CVE-2026-10802 2026-06-5 01:10 2026-06-4 Show GitHub Exploit DB Packet Storm
146 6.4 MEDIUM
Local 		- - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may allow arbitrary code execution. Most appli… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-34993 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
147 - - - authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, the SAML source response processor (ResponseProcessor.parse()) does not validate the Conditions element on ass… New CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-41577 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
148 - - - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, cookies set with the `cookies` parameter on requests are sent after following a cross-origin r… New CWE-346
 Origin Validation Error 		CVE-2026-47265 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
149 - - - authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check rather than proper UR… New CWE-601
Open Redirect 		CVE-2026-41569 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
150 9.3 CRITICAL
Network 		- - authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make the interface more comp… New CWE-79
Cross-site Scripting 		CVE-2026-42849 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm