Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206301 5.8 警告 JPMorgan Chase - Android 用 Chase Mobile Banking アプリケーションにおける SSL サーバを偽装される脆弱性 CWE-310
暗号の問題
CVE-2012-5810 2016-02-18 16:35 2012-11-4 Show GitHub Exploit DB Packet Storm
206302 4.3 警告 ZONER software - Zoner AntiVirus Free application for Android における SSL サーバを偽装される脆弱性 CWE-310
暗号の問題
CVE-2012-5456 2016-02-18 16:32 2012-10-24 Show GitHub Exploit DB Packet Storm
206303 3.3 注意 Wireshark
オラクル
- Wireshark の ERF 解析機能におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4295 2016-02-18 16:21 2012-08-15 Show GitHub Exploit DB Packet Storm
206304 6 警告 Puppet - Puppet および Puppet Enterprise における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2012-1988 2016-02-18 15:53 2012-05-29 Show GitHub Exploit DB Packet Storm
206305 5 警告 Haxx
Debian
Canonical
- libcurl の lib/url.c の ConnectionExists 関数における他のユーザとして認証される脆弱性 CWE-287
不適切な認証
CVE-2016-0755 2016-02-18 14:15 2016-01-27 Show GitHub Exploit DB Packet Storm
206306 5 警告 Haxx - Windows 上で稼動する cURL における別のドライブのカレントワーキングディレクトリ内の任意のファイルに書き込まれる脆弱性 CWE-20
不適切な入力確認
CVE-2016-0754 2016-02-18 14:15 2016-01-27 Show GitHub Exploit DB Packet Storm
206307 7.5 危険 Kozea Project - Windows 上で稼動する Radicale のファイルシステムのストレージバックエンドにおける任意のファイルを読み書きされる脆弱性 CWE-Other
その他
CVE-2016-1505 2016-02-18 13:47 2016-01-6 Show GitHub Exploit DB Packet Storm
206308 5 警告 Kozea Project - Radicale における owner_write および owner_only 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8748 2016-02-18 13:47 2015-12-23 Show GitHub Exploit DB Packet Storm
206309 7.5 危険 Kozea Project - Radicale のマルチファイルシステムのストレージバックエンドにおける任意のファイルを読み書きされる脆弱性 CWE-20
不適切な入力確認
CVE-2015-8747 2016-02-18 13:47 2015-12-24 Show GitHub Exploit DB Packet Storm
206310 6.4 警告 Atlassian - Atlassian Bamboo の複数の不特定のサービスにおける重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2015-8361 2016-02-18 13:36 2015-11-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1581 - - - In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the __SERVICEACCOUNT_TOKEN__ placeholder (Canal/Flannel-Calico d… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-41184 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
1582 8.6 HIGH
Local
- - Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted without shell quoting or… CWE-78
OS Command 
CVE-2026-44461 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
1583 6.4 MEDIUM
Network
- - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowliste… CWE-184
 Incomplete Blacklist
CVE-2026-44462 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
1584 8.6 HIGH
Local
- - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior (e.g.,… CWE-78
CWE-184
OS Command 
 Incomplete Blacklist
CVE-2026-44463 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
1585 - - - When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, t… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-41185 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
1586 8.6 HIGH
Local
- - Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allow… CWE-78
OS Command 
CVE-2026-44465 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
1587 8.2 HIGH
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM policy handlers and dis… CWE-862
 Missing Authorization
CVE-2026-42083 2026-05-29 03:40 2026-05-28 Show GitHub Exploit DB Packet Storm
1588 7.7 HIGH
Network
- - OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, OpenReplay's Python API exposes several app_apikey routes that trust a caller-provided projectKey after validating only that the API… CWE-284
Improper Access Control
CVE-2026-45296 2026-05-29 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
1589 - - - OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, there is a cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatch. ProjectAuthorizer.__call__ (OSS… CWE-285
CWE-639
CWE-863
Improper Authorization
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization
CVE-2026-45297 2026-05-29 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
1590 2.7 LOW
Network
synology surveillance_station Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows … CWE-22
Path Traversal
CVE-2024-47267 2026-05-29 03:39 2026-05-27 Show GitHub Exploit DB Packet Storm