Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209591 10 危険 日立
オラクル		 - Oracle Java SE における 2D に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4760 2015-11-20 16:40 2015-07-14 Show GitHub Exploit DB Packet Storm
209592 5 警告 日立
オラクル		 - Oracle Java SE における 2D に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-2632 2015-11-20 16:40 2015-07-14 Show GitHub Exploit DB Packet Storm
209593 4 警告 TIBCO Software - TIBCO LogLogic Unity の Web サーバコンポーネントにおける権限を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-8090 2015-11-20 16:06 2015-11-17 Show GitHub Exploit DB Packet Storm
209594 5 警告 strongSwan - strongSwan の eap-mschapv2 プラグインの EAP-MSCHAPv2 プロトコルのサーバの実装における認証を回避される脆弱性 CWE-20
CWE-264
CVE-2015-8023 2015-11-20 16:06 2015-11-16 Show GitHub Exploit DB Packet Storm
209595 4 警告 Apache Software Foundation - Apache CXF の SAML Web SSO モジュールにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5253 2015-11-20 15:25 2015-07-31 Show GitHub Exploit DB Packet Storm
209596 10 危険 Arista Networks, Inc. - Arista EOS における root 権限で任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-8236 2015-11-20 15:11 2015-11-18 Show GitHub Exploit DB Packet Storm
209597 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8053 2015-11-20 15:01 2015-11-17 Show GitHub Exploit DB Packet Storm
209598 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8052 2015-11-20 15:01 2015-11-17 Show GitHub Exploit DB Packet Storm
209599 10 危険 アドビシステムズ - iOS 用 Adobe Premiere Clip アプリケーションにおける脆弱性 CWE-noinfo
情報不足 		CVE-2015-8051 2015-11-20 15:01 2015-11-17 Show GitHub Exploit DB Packet Storm
209600 7.8 危険 Exemys - Exemys Telemetry Web Server におけるアクセス制限を回避される脆弱性 CWE-200
CWE-Other
CVE-2015-7910 2015-11-20 14:27 2015-11-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3291 7.3 HIGH
Network 		- - An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java component CWE-502
 Deserialization of Untrusted Data 		CVE-2026-37579 2026-06-2 06:16 2026-05-28 Show GitHub Exploit DB Packet Storm
3292 6.5 MEDIUM
Network 		streamlink streamlink Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries an… CWE-22
Path Traversal 		CVE-2026-44353 2026-06-2 05:14 2026-05-28 Show GitHub Exploit DB Packet Storm
3293 5.5 MEDIUM
Local 		wireshark wireshark ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service CWE-476
 NULL Pointer Dereference 		CVE-2026-9759 2026-06-2 04:26 2026-05-28 Show GitHub Exploit DB Packet Storm
3294 7.3 HIGH
Network 		- - Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. The header injection rule was ineffective at blocking header injections in the r… CWE-113
CWE-790
HTTP Response Splitting 		CVE-2026-9658 2026-06-2 04:16 2026-05-28 Show GitHub Exploit DB Packet Storm
3295 9.1 CRITICAL
Network 		- - Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover. The getExistUserByBindingRule function matches users by email without… - CVE-2026-9092 2026-06-2 04:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3296 4.3 MEDIUM
Network 		- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reported previously, the same missing mailbox m… CWE-285
Improper Authorization 		CVE-2026-48810 2026-06-2 04:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3297 9.0 CRITICAL
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the application.updateTraefikConfig tRPC endpoint allows admin/owner users … CWE-78
OS Command  		CVE-2026-45630 2026-06-2 04:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3298 7.2 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version… CWE-78
OS Command  		CVE-2025-41265 2026-06-2 03:58 2026-05-29 Show GitHub Exploit DB Packet Storm
3299 7.2 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version… CWE-78
OS Command  		CVE-2025-41266 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
3300 7.2 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version… CWE-78
OS Command  		CVE-2025-41267 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm