Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213061 4.3 警告 Apache Software Foundation - Apache Flex の asdoc/templates/index.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1773 2015-04-9 11:43 2015-03-31 Show GitHub Exploit DB Packet Storm
213062 7.5 危険 GNU Project - GNU C Library の stdio-common/vfscanf.c 内の ADDW マクロおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-1472 2015-04-9 11:29 2015-02-6 Show GitHub Exploit DB Packet Storm
213063 7.8 危険 FreeBSD - FreeBSD における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2015-1414 2015-04-9 10:12 2015-02-25 Show GitHub Exploit DB Packet Storm
213064 6.4 警告 libarchive - libarchive の bsdcpio における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-2304 2015-04-8 18:00 2015-03-1 Show GitHub Exploit DB Packet Storm
213065 5 警告 Wireshark - Wireshark の TNEF ディセクタの epan/dissectors/packet-tnef.c の dissect_tnef 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-2191 2015-04-8 17:57 2015-03-4 Show GitHub Exploit DB Packet Storm
213066 5 警告 Wireshark - Wireshark の pcapng ファイルパーサの wiretap/pcapng.c の pcapng_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2015-2189 2015-04-8 17:57 2015-03-4 Show GitHub Exploit DB Packet Storm
213067 7.5 危険 The Tcpdump Group - tcpdump の force プリンタにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2015-2155 2015-04-8 17:55 2015-03-10 Show GitHub Exploit DB Packet Storm
213068 5 警告 The Tcpdump Group - tcpdump の Ethernet プリンタの print-isoclns.c 内の osi_print_cksum 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-2154 2015-04-8 17:55 2015-03-10 Show GitHub Exploit DB Packet Storm
213069 5 警告 The Tcpdump Group - tcpdump の TCP プリンタの print-rpki-rtr.c 内の rpki_rtr_pdu_print 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-2153 2015-04-8 17:55 2015-03-10 Show GitHub Exploit DB Packet Storm
213070 1.9 注意 GNU Project - cpio における任意のファイルに書き込まれる脆弱性 CWE-Other
その他
CVE-2015-1197 2015-04-8 17:52 2015-01-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2961 9.3 CRITICAL
Network
- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the component override system transpiles user-supplied TSX via Sucrase and evaluates it with new Function, shadowing dangerous global… CWE-693
 Protection Mechanism Failure
CVE-2026-44451 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2962 4.3 MEDIUM
Network
- - PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality CWE-79
Cross-site Scripting
CVE-2026-36239 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2963 5.2 MEDIUM
Adjacent
- - SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts VIEW intents with javascript: URI… CWE-79
Cross-site Scripting
CVE-2025-68709 2026-05-28 03:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2964 9.8 CRITICAL
Network
ibm websphere_application_server IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code executi… CWE-94
Code Injection
CVE-2026-8633 2026-05-28 03:12 2026-05-27 Show GitHub Exploit DB Packet Storm
2965 7.8 HIGH
Local
openvpn connect Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel CWE-78
CWE-267
CWE-270
CWE-648
OS Command 
 Privilege Defined With Unsafe Actions
 Privilege Context Switching Error
 Incorrect Use of Privileged APIs
CVE-2026-9560 2026-05-28 03:08 2026-05-27 Show GitHub Exploit DB Packet Storm
2966 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2. CWE-862
 Missing Authorization
CVE-2026-49054 2026-05-28 02:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2967 9.1 CRITICAL
Network
- - HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets magic prefixes: '| cm… CWE-73
CWE-78
 External Control of File Name or Path
OS Command 
CVE-2026-8450 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2968 7.3 HIGH
Network
- - IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in … CWE-95
Eval Injection
CVE-2026-48962 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2969 - - - Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available… CWE-506
 Embedded Malicious Code
CVE-2026-48027 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2970 6.5 MEDIUM
Network
- - e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how session_handler::check… CWE-285
CWE-352
Improper Authorization
 Origin Validation Error
CVE-2026-46620 2026-05-28 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm