Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207331	6.8	警告	シスコシステムズ	-	Cisco Model DPQ3925 with EDVA デバイスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-6378	2015-12-16 16:44	2015-12-8	Show	GitHub Exploit DB Packet Storm

207332	4.3	警告	シスコシステムズ	-	Cisco Small Business RV ルータおよび SA500 Security Appliance 上で稼動する乱数生成器における TLS 鍵ペアを特定される脆弱性	CWE-200 情報漏えい	CVE-2015-6418	2015-12-16 16:43	2015-12-10	Show	GitHub Exploit DB Packet Storm

207333	4	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager のセルフサービスアプリケーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-6422	2015-12-16 15:13	2015-12-11	Show	GitHub Exploit DB Packet Storm

207334	4.3	警告	シスコシステムズ	-	Cisco Unified Email Interaction Manager and Unified Web Interaction Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-6416	2015-12-16 15:13	2015-12-10	Show	GitHub Exploit DB Packet Storm

207335	4	警告	シスコシステムズ	-	Cisco Unified Communications Manager の Mobile and Remote Access サービスの実装における電話受信および電話設定の制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2015-6410	2015-12-16 15:13	2015-12-9	Show	GitHub Exploit DB Packet Storm

207336	6.5	警告	シスコシステムズ	-	Cisco Videoscape Distribution Suite Service Manager におけるデータベースエントリを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-6417	2015-12-16 11:27	2015-12-10	Show	GitHub Exploit DB Packet Storm

207337	7.1	危険	シスコシステムズ	-	Cisco Fabric Interconnect 6200 デバイス上で稼動する Unified Computing System におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-6415	2015-12-16 11:27	2015-12-10	Show	GitHub Exploit DB Packet Storm

207338	6.8	警告	シスコシステムズ	-	Cisco Unity Connection におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-6408	2015-12-16 11:27	2015-12-9	Show	GitHub Exploit DB Packet Storm

207339	6.5	警告	シスコシステムズ	-	Cisco Prime Service Catalog における設定を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-6395	2015-12-16 11:27	2015-12-7	Show	GitHub Exploit DB Packet Storm

207340	9	危険	シスコシステムズ	-	Cisco Prime Collaboration Assurance におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2015-6389	2015-12-16 11:27	2015-12-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2501	5.8	MEDIUM Network	-	-	The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attack…	-	CVE-2026-7385	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2502	7.8	HIGH Local	-	-	Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.	CWE-59 Link Following	CVE-2026-41091	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2503	4.8	MEDIUM Network	-	-	CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in the admin role management interface. In a…	CWE-80 CWE-116 Basic XSS Improper Encoding or Escaping of Output	CVE-2026-34246	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2504	7.1	HIGH Network	-	-	libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When compositing an overla…	CWE-125 Out-of-bounds Read	CVE-2026-32882	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

2505	6.5	MEDIUM Network	mozilla	firefox thunderbird	Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8961	2026-05-21 02:58	2026-05-19	Show	GitHub Exploit DB Packet Storm

2506	7.5	HIGH Network	mozilla	firefox thunderbird	Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-200 Information Exposure	CVE-2026-8967	2026-05-21 02:57	2026-05-19	Show	GitHub Exploit DB Packet Storm

2507	8.1	HIGH Network	mozilla	firefox thunderbird	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-693 Protection Mechanism Failure	CVE-2026-8962	2026-05-21 02:56	2026-05-19	Show	GitHub Exploit DB Packet Storm

2508	7.5	HIGH Network	mozilla	firefox thunderbird	Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-200 Information Exposure	CVE-2026-8965	2026-05-21 02:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

2509	7.5	HIGH Network	mozilla	firefox thunderbird	Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-200 Information Exposure	CVE-2026-8966	2026-05-21 02:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

2510	7.5	HIGH Network	progress	moveit_automation	Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-8485	2026-05-21 02:50	2026-05-20	Show	GitHub Exploit DB Packet Storm