Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202301 7.5 重要
Network
Squid-cache.org - Squid HTTP Proxy の Collapsed Forwarding 機能におけるプライベートな応答を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-10003 2017-03-16 09:56 2016-12-16 Show GitHub Exploit DB Packet Storm
202302 7.5 重要
Network
Squid-cache.org
Debian
- Squid HTTP Proxy におけるクライアント固有の Cookie データ漏えいの脆弱性 CWE-200
情報漏えい
CVE-2016-10002 2017-03-16 09:56 2016-12-16 Show GitHub Exploit DB Packet Storm
202303 9.8 緊急
Network
The Perl Foundation - Perl の VDir::MapPathA および VDir::MapPathW 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2015-8608 2017-03-15 18:03 2015-11-28 Show GitHub Exploit DB Packet Storm
202304 7.2 重要
Network
IBM - IBM Tivoli Storage Manager Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8998 2017-03-15 17:52 2016-10-25 Show GitHub Exploit DB Packet Storm
202305 6.1 警告
Network
IBM - Ephox WebRadar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8922 2017-03-15 17:52 2016-11-18 Show GitHub Exploit DB Packet Storm
202306 9.8 緊急
Network
PEAR - PEAR HTML_AJAX の PHP Serializer における PHP オブジェクトインジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2017-5677 2017-03-15 17:49 2017-02-2 Show GitHub Exploit DB Packet Storm
202307 7.5 重要
Network
PEAR - PEAR Base System のインストーラのダウンロードユーティリティクラスの PECL におけるファイルを上書きされる脆弱性 CWE-254
セキュリティ機能
CVE-2017-5630 2017-03-15 17:49 2017-01-26 Show GitHub Exploit DB Packet Storm
202308 5.9 警告
Network
Square, Inc. - OkHttp における証明書ピン留めを回避される脆弱性 CWE-295
不正な証明書検証
CVE-2016-2402 2017-03-15 17:34 2016-02-11 Show GitHub Exploit DB Packet Storm
202309 7.5 重要
Network
minitar - RubyGems minitar および archive-tar-minitar におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-10173 2017-03-15 17:15 2016-11-14 Show GitHub Exploit DB Packet Storm
202310 7.5 重要
Network
SAP - Windows 上で稼動する SAP GUI の SAPlpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-10079 2017-03-15 17:09 2016-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4231 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… CWE-79
Cross-site Scripting
CVE-2026-48301 2026-06-10 23:46 2026-06-10 Show GitHub Exploit DB Packet Storm
4232 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… CWE-79
Cross-site Scripting
CVE-2026-48304 2026-06-10 23:45 2026-06-10 Show GitHub Exploit DB Packet Storm
4233 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… CWE-79
Cross-site Scripting
CVE-2026-47974 2026-06-10 23:33 2026-06-10 Show GitHub Exploit DB Packet Storm
4234 7.3 HIGH
Network
- - Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted CWE-295
Improper Certificate Validation 
CVE-2026-9758 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4235 7.7 HIGH
Network
- - Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the… CWE-22
Path Traversal
CVE-2026-49957 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4236 5.4 MEDIUM
Network
- - Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a stored cross-site scripting vulnerability in the course search functionality that allows authenticated Banner ERP user… CWE-79
Cross-site Scripting
CVE-2026-47106 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4237 7.8 HIGH
Local
- - LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, LMDeploy is vulnerable to arbitrary code execution through hardcoded "trust_remote_c… CWE-94
Code Injection
CVE-2026-46432 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4238 - - - Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… CWE-20
 Improper Input Validation 
CVE-2026-0415 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4239 - - - Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… CWE-94
Code Injection
CVE-2026-0414 2026-06-10 23:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4240 6.1 MEDIUM
Network
apache answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization … CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-25699 2026-06-10 22:38 2026-06-9 Show GitHub Exploit DB Packet Storm