Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202791 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータの qmiweb における CfgType=get_homeCfg リクエストに対して重要な情報を提供される脆弱性 CWE-200
情報漏えい
CVE-2016-10181 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
202792 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータにおけるシード値 srand(time(0)) に基づき WPS PIN を生成される脆弱性 CWE-338
暗号における脆弱な PRNG の使用
CVE-2016-10180 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
202793 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータにおけるハードコードされた WPS PIN を使用する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2016-10179 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
202794 9.8 緊急
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータにおける "/sbin/telnetd -l /bin/sh" コマンドを起動される脆弱性 CWE-254
セキュリティ機能
CVE-2016-10178 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
202795 9.8 緊急
Network
D-Link Systems, Inc. - D-Link DWR-932B ルータにおける特定のパスワードで管理者および root ログインをされる脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2016-10177 2017-02-15 13:31 2016-09-28 Show GitHub Exploit DB Packet Storm
202796 7.5 重要
Network
ISC, Inc. - ISC BIND にサービス運用妨害 (DoS) の脆弱性 - CVE-2017-3135 2017-02-15 12:19 2017-02-9 Show GitHub Exploit DB Packet Storm
202797 7.8 重要
Local
Artifex Software - Artifex Software, Inc. の MuJS の jsdate.c 内の MakeDay 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-5628 2017-02-15 11:14 2017-01-24 Show GitHub Exploit DB Packet Storm
202798 7.8 重要
Local
Artifex Software - Artifex Software, Inc. の MuJS の jsrun.c 内の jsR_setproperty 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-5627 2017-02-15 11:11 2017-01-24 Show GitHub Exploit DB Packet Storm
202799 5.9 警告
Network
NTP Project - NTP の ntpq の getresponse 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-400
CWE-835
CVE-2015-8158 2017-02-14 19:49 2015-10-16 Show GitHub Exploit DB Packet Storm
202800 4.8 警告
Network
NTP Project - NTP の ntpq プロトコルにおける反射攻撃を実行される脆弱性 CWE-284
CWE-294
CVE-2015-8140 2017-02-14 19:49 2015-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
551 7.8 HIGH
Local
- - rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the permission splitter did not conservatively split or reject several shell constructs that Bash treat… New CWE-863
 Incorrect Authorization
CVE-2026-54555 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
552 9.6 CRITICAL
Network
- - Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled `HTTP_HOST` request header as the authoritative source for buildin… New CWE-20
CWE-601
 Improper Input Validation 
Open Redirect
CVE-2026-54588 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
553 6.9 MEDIUM
Network
- - Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 are vulnerable to CSV Injection (Formula Injection) in its log export functionality. User-cont… New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2026-47693 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
554 8.8 HIGH
Local
- - Style Dictionary, a build system for creating cross-platform styles, has a prototype pollution vulnerability starting in version 4.3.0 and prior to version 5.4.4. Impact users have: direct usage of `… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-54639 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
555 - - - OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2, `FileFormatSpi3D.cpp:163` uses `sscanf` with `%s` into 64-byte stack buffers when parsing LUT dat… New CWE-120
Classic Buffer Overflow
CVE-2026-42450 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
556 - - - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in parse_link_text. Whe… New CWE-400
CWE-407
CWE-770
 Uncontrolled Resource Consumption
 Inefficient Algorithmic Complexity
 Allocation of Resources Without Limits or Throttling
CVE-2026-49851 2026-06-26 05:18 2026-06-25 Show GitHub Exploit DB Packet Storm
557 - - - SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway construct their routers wit… New CWE-22
Path Traversal
CVE-2026-54917 2026-06-26 05:17 2026-06-26 Show GitHub Exploit DB Packet Storm
558 5.4 MEDIUM
Network
- - Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-53946 2026-06-26 05:17 2026-06-25 Show GitHub Exploit DB Packet Storm
559 - - - NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, with NC_SECURE_ATTACHMENTS=true, an authenticated uploader could deliver .html or .svg attachments that the browser rend… New CWE-79
Cross-site Scripting
CVE-2026-53929 2026-06-26 05:17 2026-06-24 Show GitHub Exploit DB Packet Storm
560 - - - SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). DPA Countermeasures … New CWE-331
 Insufficient Entropy
CVE-2026-4930 2026-06-26 05:17 2026-06-26 Show GitHub Exploit DB Packet Storm