Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210651 5 警告 LEMON-S PHP - 画像掲示板plus のファイルアップロード処理における脆弱性 CWE-20
不適切な入力確認 		CVE-2015-2974 2015-07-30 15:13 2015-07-28 Show GitHub Exploit DB Packet Storm
210652 4.9 警告 シスコシステムズ - Mac OS X 上で稼働する Cisco AnyConnect Secure Mobility Client のカーネルエクステンションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-4290 2015-07-30 15:08 2015-07-28 Show GitHub Exploit DB Packet Storm
210653 4.3 警告 シスコシステムズ - 複数の Cisco セキュリティ アプライアンスの LDAP の実装におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2015-4288 2015-07-30 15:08 2015-07-24 Show GitHub Exploit DB Packet Storm
210654 5 警告 シスコシステムズ - Cisco Firepower 9000 デバイス上で稼動する Firepower Extensible Operating System におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-4287 2015-07-30 15:08 2015-07-27 Show GitHub Exploit DB Packet Storm
210655 5 警告 シスコシステムズ - Cisco Unified Computing System Central ソフトウェアの Web フレームワークにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2015-4286 2015-07-30 15:08 2015-07-28 Show GitHub Exploit DB Packet Storm
210656 4.3 警告 シスコシステムズ - 複数の Cisco セキュリティ アプライアンス上で稼動する AsyncOS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-0732 2015-07-30 15:08 2015-07-27 Show GitHub Exploit DB Packet Storm
210657 6.5 警告 X.Org Foundation
XFree86 Project
オラクル		 - 複数の X.Org 製品の GLX エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-8098 2015-07-29 17:52 2014-12-9 Show GitHub Exploit DB Packet Storm
210658 6.5 警告 X.Org Foundation
XFree86 Project
オラクル		 - 複数の X.Org 製品の GLX エクステンションにおける整数オーバーフローの脆弱性 CWE-Other
その他 		CVE-2014-8093 2015-07-29 17:43 2014-12-9 Show GitHub Exploit DB Packet Storm
210659 8.5 危険 X.Org Foundation
オラクル		 - X.Org libXfont の bitmap/bdfread.c の bdfReadCharacters 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2015-1804 2015-07-29 17:41 2015-03-17 Show GitHub Exploit DB Packet Storm
210660 8.5 危険 X.Org Foundation
オラクル		 - X.Org libXfont の bitmap/bdfread.c の bdfReadProperties 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-1802 2015-07-29 17:41 2015-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 6.5 MEDIUM
Adjacent 		- - Dräger Infinity M300 patient worn monitors with software version VG2.3.1 and earlier contain a network-based denial of service vulnerability that allows network-adjacent attackers to repeatedly trigg… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-25721 2026-06-4 03:16 2026-06-3 Show GitHub Exploit DB Packet Storm
82 6.5 MEDIUM
Adjacent 		- - Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot th… New CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2019-25720 2026-06-4 03:16 2026-06-4 Show GitHub Exploit DB Packet Storm
83 8.8 HIGH
Adjacent 		tp-link archer_c64_firmware Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web … Update CWE-288
CWE-306
Authentication Bypass Using an Alternate Path or Channel
Missing Authentication for Critical Function 		CVE-2026-8697 2026-06-4 03:14 2026-05-29 Show GitHub Exploit DB Packet Storm
84 5.3 MEDIUM
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with networ… Update CWE-200
Information Exposure 		CVE-2026-46830 2026-06-4 03:12 2026-05-29 Show GitHub Exploit DB Packet Storm
85 9.0 CRITICAL
Network 		oracle database_server Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with… Update NVD-CWE-noinfo
CVE-2026-46833 2026-06-4 03:12 2026-05-29 Show GitHub Exploit DB Packet Storm
86 8.1 HIGH
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc… Update CWE-400
CWE-284
 Uncontrolled Resource Consumption
Improper Access Control 		CVE-2026-35277 2026-06-4 03:03 2026-05-29 Show GitHub Exploit DB Packet Storm
87 7.9 HIGH
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network a… Update CWE-400
CWE-352
 Uncontrolled Resource Consumption
 Origin Validation Error 		CVE-2026-35266 2026-06-4 03:03 2026-05-29 Show GitHub Exploit DB Packet Storm
88 7.5 HIGH
Network 		hkuds deepcode DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to read arbitrary files by supplying… Update CWE-22
Path Traversal 		CVE-2026-32847 2026-06-4 03:02 2026-05-29 Show GitHub Exploit DB Packet Storm
89 9.1 CRITICAL
Network 		electerm_project electerm electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confid… Update CWE-326
CWE-329
CWE-353
CWE-759
CWE-916
Inadequate Encryption Strength
 Not Using a Random IV with CBC Mode
 Missing Support for Integrity Check
 Use of a One-Way Hash without a Salt
 Use of Password Hash With Insufficient Computational Effort 		CVE-2026-45787 2026-06-4 02:56 2026-05-29 Show GitHub Exploit DB Packet Storm
90 7.8 HIGH
Local 		electerm_project electerm electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0. Update CWE-94
CWE-732
CWE-940
Code Injection
 Incorrect Permission Assignment for Critical Resource
 Improper Verification of Source of a Communication Channel 		CVE-2026-45353 2026-06-4 02:54 2026-05-29 Show GitHub Exploit DB Packet Storm