Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211871 3.5 注意 Moodle - Moodle の course/pending.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-0212 2015-06-4 11:04 2015-01-19 Show GitHub Exploit DB Packet Storm
211872 4 警告 Moodle - Moodle の mod/lti/ajax.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-0211 2015-06-4 11:04 2015-01-19 Show GitHub Exploit DB Packet Storm
211873 4.3 警告 Zenphoto - Zenphoto におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-2948 2015-06-3 18:04 2015-05-28 Show GitHub Exploit DB Packet Storm
211874 4.3 警告 ZenPhoto20 - ZenPhoto20 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-2949 2015-06-3 18:04 2015-05-28 Show GitHub Exploit DB Packet Storm
211875 6.8 警告 Synology Inc. - Synology の OS X 向け Cloud Station Client ユーティリティに一般ユーザによるシステムファイルの所有者変更が可能になる問題 CWE-264
CWE-Other
CVE-2015-2851 2015-06-3 18:04 2015-05-26 Show GitHub Exploit DB Packet Storm
211876 6.8 警告 IDS - IDS RTU 850C デバイス用 NC854 および NC856 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-3939 2015-06-3 16:58 2015-05-28 Show GitHub Exploit DB Packet Storm
211877 7.5 危険 IBM - IBM PowerVC における任意のデータベースのレコードを読み書きされる脆弱性 CWE-Other
その他 		CVE-2015-1937 2015-06-3 16:55 2015-05-29 Show GitHub Exploit DB Packet Storm
211878 3.5 注意 IBM - IBM Business Process Manager および WebSphere Lombardi Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-0193 2015-06-3 16:55 2015-05-27 Show GitHub Exploit DB Packet Storm
211879 3.7 注意 IBM - IBM Rational Requirements Composer および Rational DOORS Next Generation におけるアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2015-0121 2015-06-3 16:55 2015-05-28 Show GitHub Exploit DB Packet Storm
211880 10 危険 NetApp - NetApp OnCommand Workflow Automation のインストーラにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-3292 2015-06-3 16:30 2015-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2941 9.8 CRITICAL
Network 		- - A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipul… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9543 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2942 3.3 LOW
Local 		- - A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a mani… CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2026-9530 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2943 3.3 LOW
Local 		- - A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bou… CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2026-9504 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2944 - - - IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service … CWE-476
 NULL Pointer Dereference 		CVE-2026-8479 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2945 - - - FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow_v9_collector.cpp, the Data template bra… - CVE-2026-48683 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2946 7.6 HIGH
Network 		- - Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to 0.32.0 affecting redirect-following proces… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45082 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2947 6.2 MEDIUM
Local 		- - In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a crafted TFLite model file to bypass buffer size validation and trigger a heap-based … CWE-190
 Integer Overflow or Wraparound 		CVE-2026-42627 2026-05-27 01:16 2026-05-23 Show GitHub Exploit DB Packet Storm
2948 - - - An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-l… - CVE-2026-38587 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2949 7.0 HIGH
Local 		samba rsync Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replac… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-29518 2026-05-27 01:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2950 7.8 HIGH
Local 		- - A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-25112 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm