Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201771 5.5 警告
Local
PoDoFo project - PoDoFo の base/PdfOutputStream.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-5854 2017-03-17 16:57 2017-02-1 Show GitHub Exploit DB Packet Storm
201772 7.8 重要
Local
PoDoFo project - PoDoFo の base/PdfParser.cpp における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-5853 2017-03-17 16:57 2017-02-1 Show GitHub Exploit DB Packet Storm
201773 5.5 警告
Local
PoDoFo project - PoDoFo の base/PdfVariant.cpp の PoDoFo::PdfPage::GetInheritedKeyFromObject 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-5852 2017-03-17 16:57 2017-02-1 Show GitHub Exploit DB Packet Storm
201774 5.9 警告
Local
Grails project - Grails Pdf Plugin における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2017-6344 2017-03-17 16:51 2017-02-21 Show GitHub Exploit DB Packet Storm
201775 7.8 重要
Local
Iceni Technology - Iceni Argus におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8387 2017-03-17 16:47 2016-10-10 Show GitHub Exploit DB Packet Storm
201776 7.8 重要
Local
Iceni Technology - Iceni Argus におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8386 2017-03-17 16:47 2016-10-10 Show GitHub Exploit DB Packet Storm
201777 7.4 重要
Network
フォーティネット - Fortinet FortiManager における認証情報の検証不備の脆弱性 CWE-200
情報漏えい
CVE-2016-8495 2017-03-17 16:39 2016-10-7 Show GitHub Exploit DB Packet Storm
201778 5.9 警告
Network
フォーティネット - Fortinet FortiGate の ANSI X9.31 RNG の実装における不正な読み取りアクセス権を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-8492 2017-03-17 16:39 2016-11-22 Show GitHub Exploit DB Packet Storm
201779 5.5 警告
Local
zziplib project - zziplib の memdisk.c の zzip_mem_entry_new 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2017-5978 2017-03-17 16:33 2017-02-9 Show GitHub Exploit DB Packet Storm
201780 5.5 警告
Local
zziplib project - zziplib の memdisk.c の zzip_mem_entry_extra_block 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2017-5977 2017-03-17 16:33 2017-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
781 5.3 MEDIUM
Network
- - This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers. New CWE-20
 Improper Input Validation 
CVE-2026-42389 2026-06-26 01:16 2026-06-25 Show GitHub Exploit DB Packet Storm
782 5.9 MEDIUM
Network
- - Incomplete validation of the SOA record present in a catalog zone might lead to a crash. New CWE-20
 Improper Input Validation 
CVE-2026-42388 2026-06-26 01:16 2026-06-25 Show GitHub Exploit DB Packet Storm
783 5.9 MEDIUM
Network
- - A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation. New CWE-20
 Improper Input Validation 
CVE-2026-42387 2026-06-26 01:16 2026-06-25 Show GitHub Exploit DB Packet Storm
784 5.3 MEDIUM
Network
- - ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled; New CWE-524
 Use of Cache Containing Sensitive Information
CVE-2026-40012 2026-06-26 01:16 2026-06-25 Show GitHub Exploit DB Packet Storm
785 - - - Malicious HTML content could be injected into the content rendered by the pretix-digital plugin. New CWE-80
Basic XSS
CVE-2026-13314 2026-06-26 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
786 - - - Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page for individual tickets in that order. New CWE-80
Basic XSS
CVE-2026-13225 2026-06-26 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
787 - - - Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and suppl… New CWE-841
 Improper Enforcement of Behavioral Workflow
CVE-2026-13223 2026-06-26 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
788 - - - Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply i… New CWE-841
 Improper Enforcement of Behavioral Workflow
CVE-2026-13222 2026-06-26 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
789 2.7 LOW
Network
- - Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the UserGroupsView permission to coerce server-side… New CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-12755 2026-06-26 01:16 2026-06-25 Show GitHub Exploit DB Packet Storm
790 2.5 LOW
Local
- - Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render session Markdown into a static HTML file. It did not consistently reject unsafe Markdown link and image URL s… New CWE-79
Cross-site Scripting
CVE-2026-54326 2026-06-26 01:14 2026-06-24 Show GitHub Exploit DB Packet Storm