Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204961 6.1 警告
Network
フォーティネット - Fortinet FortiManager および FortiAnalyzer のアドレス追加ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3194 2016-08-23 14:40 2016-08-9 Show GitHub Exploit DB Packet Storm
204962 5.4 警告
Network
フォーティネット - Fortinet FortiManager および FortiAnalyzer のアプライアンスの Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3193 2016-08-23 14:40 2016-08-9 Show GitHub Exploit DB Packet Storm
204963 6.1 警告
Network
Apache Software Foundation - Apache OpenMeetings の SWF パネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3089 2016-08-23 14:28 2016-08-12 Show GitHub Exploit DB Packet Storm
204964 8.8 重要
Network
Apache Software Foundation - Apache Sentry における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-0760 2016-08-23 14:28 2016-08-4 Show GitHub Exploit DB Packet Storm
204965 5 警告 OpenSSL Project
オラクル
- BN_mod_exp で使用される x86_64 プラットフォーム上で稼動する OpenSSL の crypto/bn/asm/x86_64-mont5.pl における重要な秘密鍵の情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-3193 2016-08-22 17:40 2015-12-3 Show GitHub Exploit DB Packet Storm
204966 4.3 警告 Mozilla Foundation
オラクル
- Mozilla 製品などで使用される Mozilla Network Security Services における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2015-2721 2016-08-22 17:40 2015-07-2 Show GitHub Exploit DB Packet Storm
204967 8.8 重要
Network
シスコシステムズ - Cisco Firepower Management Center および ASA 5500-X Series with FirePOWER Services の Web ベース GUI におけるユーザアカウント権限を拡大される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1458 2016-08-22 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
204968 8.8 重要
Network
シスコシステムズ - Cisco Firepower Management Center および ASA 5500-X Series with FirePOWER Services の Web ベース GUI における root 権限で任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1457 2016-08-22 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
204969 8.8 重要
Network
シスコシステムズ - Cisco Application Policy Infrastructure Controller エンタープライズ モジュールにおける root 権限で任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1365 2016-08-22 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
204970 5.8 警告
Local
SAP - SAP SAPCAR における任意のファイルのパーミッションを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5847 2016-08-22 15:33 2016-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1501 7.5 HIGH
Network
- - Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted expression, an attack… CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-41850 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1502 5.3 MEDIUM
Network
- - Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded c… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-41851 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1503 5.3 MEDIUM
Network
- - Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 … CWE-444
HTTP Request Smuggling
CVE-2026-41853 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1504 4.2 MEDIUM
Network
- - Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack. A… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41854 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1505 8.1 HIGH
Network
- - In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary cl… CWE-502
 Deserialization of Untrusted Data
CVE-2026-41855 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1506 7.1 HIGH
Local
- - A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), S… CWE-313
 Cleartext Storage in a File or on Disk
CVE-2026-24349 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1507 6.1 MEDIUM
Adjacent
- - A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP200) (All version… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2025-40808 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1508 4.7 MEDIUM
Local
- - A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbi… CWE-22
Path Traversal
CVE-2026-52902 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1509 - - - When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content… CWE-79
CWE-436
Cross-site Scripting
 Interpretation Conflict
CVE-2026-47344 2026-06-9 22:46 2026-06-9 Show GitHub Exploit DB Packet Storm
1510 - - - Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2. CWE-79
Cross-site Scripting
CVE-2026-47345 2026-06-9 22:46 2026-06-9 Show GitHub Exploit DB Packet Storm