Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203321 6.7 警告
Local
オラクル - Oracle MySQL の MySQL Server における Server: Packaging に関する脆弱性 CWE-254
セキュリティ機能
CVE-2017-3312 2017-02-1 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
203322 6.3 警告
Local
オラクル - Oracle MySQL の MySQL Server における Server: Packaging に関する脆弱性 CWE-noinfo
情報不足
CVE-2017-3291 2017-02-1 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
203323 6.5 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: DDL に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-3273 2017-02-1 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
203324 8.4 重要
Local
オラクル - Oracle Virtualization の Oracle VM VirtualBox における VirtualBox SVGA Emulation に関する脆弱性 CWE-noinfo
情報不足
CVE-2017-3332 2017-02-1 12:26 2017-01-17 Show GitHub Exploit DB Packet Storm
203325 8.4 重要
Network
オラクル - Oracle Virtualization の Oracle VM VirtualBox における GUI に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-3316 2017-02-1 12:26 2017-01-17 Show GitHub Exploit DB Packet Storm
203326 7.9 重要
Local
オラクル - Oracle Virtualization の Oracle VM VirtualBox における Shared Folder に関する脆弱性 CWE-noinfo
情報不足
CVE-2017-3290 2017-02-1 12:26 2017-01-17 Show GitHub Exploit DB Packet Storm
203327 6.3 警告
Network
オラクル - Oracle Virtualization の Oracle VM VirtualBox における GUI に関する脆弱性 CWE-254
セキュリティ機能
CVE-2016-5545 2017-02-1 12:26 2017-01-17 Show GitHub Exploit DB Packet Storm
203328 4.3 警告
Network
オラクル - Oracle Commerce の Oracle Commerce Platform における Dynamo Application Framework に関する脆弱性 CWE-200
情報漏えい
CVE-2017-3296 2017-02-1 11:23 2017-01-17 Show GitHub Exploit DB Packet Storm
203329 7.6 重要
Network
オラクル - Oracle Siebel CRM の Siebel UI Framework における Open UI に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3330 2017-02-1 11:18 2017-01-17 Show GitHub Exploit DB Packet Storm
203330 8.2 重要
Network
オラクル - Oracle Siebel CRM の Siebel UI Framework における EAI に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3325 2017-02-1 11:18 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 4.9 MEDIUM
Network
- - A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim int… New CWE-20
 Improper Input Validation 
CVE-2026-13434 2026-06-27 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
142 8.4 HIGH
Local
- - Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device P… New CWE-639
CWE-862
 Authorization Bypass Through User-Controlled Key
 Missing Authorization
CVE-2026-12411 2026-06-27 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
143 7.5 HIGH
Network
- - Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared… New CWE-335
 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
CVE-2026-11702 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
144 7.5 HIGH
Network
- - Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the in… New CWE-335
 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
CVE-2026-11625 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
145 7.5 HIGH
Network
wolfssl wolfssl wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation. Ciphertex… New CWE-697
 Incorrect Comparison
CVE-2026-10097 2026-06-27 02:16 2026-06-26 Show GitHub Exploit DB Packet Storm
146 - - - An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message,… New CWE-208
 Information Exposure Through Timing Discrepancy
CVE-2023-20572 2026-06-27 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
147 - - - An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potential… New CWE-208
 Information Exposure Through Timing Discrepancy
CVE-2023-20540 2026-06-27 02:16 2026-06-27 Show GitHub Exploit DB Packet Storm
148 8.8 HIGH
Network
langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router exposes 7 endpoints that perform read, write, and delete operations on… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-33760 2026-06-27 02:10 2026-06-24 Show GitHub Exploit DB Packet Storm
149 6.5 MEDIUM
Network
langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (POST /api/v1/knowledge_bases). This… New CWE-22
Path Traversal
CVE-2026-42867 2026-06-27 02:09 2026-06-24 Show GitHub Exploit DB Packet Storm
150 9.6 CRITICAL
Network
langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulnerability. Shareable … New CWE-94
Code Injection
CVE-2026-48519 2026-06-27 02:07 2026-06-24 Show GitHub Exploit DB Packet Storm