Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209441 5.7 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server : Compiling に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0501 2015-10-21 14:38 2015-04-14 Show GitHub Exploit DB Packet Storm
209442 7.8 危険 ジュニパーネットワークス - Juniper Junos OS の SSH サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-7752 2015-10-21 14:24 2015-10-14 Show GitHub Exploit DB Packet Storm
209443 6.9 警告 ジュニパーネットワークス - Juniper Junos OS における root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-7751 2015-10-21 14:24 2015-10-14 Show GitHub Exploit DB Packet Storm
209444 5 警告 ジュニパーネットワークス - Juniper Netscreen および ScreenOS Firewall 製品の ScreenOS の L2TP パケット処理機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-7750 2015-10-21 14:24 2015-10-15 Show GitHub Exploit DB Packet Storm
209445 7.8 危険 ジュニパーネットワークス - Juniper Junos OS の vSRX 仮想ファイアウォールの PFE デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-7749 2015-10-21 14:24 2015-10-14 Show GitHub Exploit DB Packet Storm
209446 5 警告 ジュニパーネットワークス - Juniper Trio Chipset ラインカードを搭載する筺体の Junos OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-7748 2015-10-21 14:24 2015-10-14 Show GitHub Exploit DB Packet Storm
209447 4.9 警告 Linux
レッドハット
- Red Hat Enterprise Linux の Linux Kernel パッケージの usbvision ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-7833 2015-10-21 14:15 2015-10-7 Show GitHub Exploit DB Packet Storm
209448 5.5 警告 (複数のベンダ) - Voice over LTE (VoLTE) の実装に複数の脆弱性 CWE-287
CWE-Other
- 2015-10-21 14:04 2015-10-16 Show GitHub Exploit DB Packet Storm
209449 5 警告 Persistent Systems Ltd - Persistent Accelerite Radia Client Automation のデフォルト設定におけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2015-7863 2015-10-21 11:36 2015-02-19 Show GitHub Exploit DB Packet Storm
209450 5 警告 Persistent Systems Ltd - Persistent Accelerite Radia Client Automation におけるアカウントのロールの割り当てを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-7862 2015-10-21 11:36 2015-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 - - - OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request… New CWE-284
Improper Access Control
CVE-2026-45776 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
242 - - - OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web s… New CWE-78
OS Command 
CVE-2026-45777 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
243 - - - OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attacker can inject malicious JavaScript into their Open XDMoD user profile and abus… New CWE-79
Cross-site Scripting
CVE-2026-45778 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
244 6.5 MEDIUM
Network
- - HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker sends a specially crafted site crea… New CWE-20
 Improper Input Validation 
CVE-2026-46357 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
245 6.5 MEDIUM
Network
- - HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an Authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint allows a low… New CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-46397 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
246 - - - HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version 26.0.0, the haxcms_refresh_token cookie is set without the Secure flag. This allow… New CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2026-46398 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
247 - - - HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version 25.0.0, the file upload functionality in HAXCMS PHP only validates file extensions… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-46400 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
248 - - - HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper session termination vulnerability where authentication tokens remain valid after … New CWE-613
 Insufficient Session Expiration
CVE-2026-46401 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
249 7.5 HIGH
Network
- - HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generating salts, which is unsuitable. Version 26.0.1 fixes the issue. New CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-46493 2026-06-6 05:48 2026-06-6 Show GitHub Exploit DB Packet Storm
250 7.1 HIGH
Adjacent
securly securly Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension … Update CWE-319
Cleartext Transmission of Sensitive Information
CVE-2026-8874 2026-06-6 05:47 2026-06-4 Show GitHub Exploit DB Packet Storm