Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
213961 10 危険 サムスン - Samsung Security Manager における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-3435 2015-05-7 14:23 2015-04-29 Show GitHub Exploit DB Packet Storm
213962 5 警告 Novell
Python Software Foundation		 - Pillow の Jpeg2KImagePlugin プラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-3598 2015-05-7 14:14 2014-08-18 Show GitHub Exploit DB Packet Storm
213963 5 警告 シスコシステムズ - Cisco ASR 5000 デバイス上で稼動する StarOS の session-manager サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-0712 2015-05-7 14:02 2015-04-29 Show GitHub Exploit DB Packet Storm
213964 4.3 警告 シスコシステムズ - Cisco Finesse サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-0714 2015-05-7 12:35 2015-05-1 Show GitHub Exploit DB Packet Storm
213965 5 警告 Novell
Xiph.Org		 - Icecast におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-3026 2015-05-7 12:20 2015-04-8 Show GitHub Exploit DB Packet Storm
213966 7.5 危険 DELL EMC (旧 EMC Corporation) - EMC RSA Identity Management and Governance におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-0532 2015-05-7 11:52 2015-04-29 Show GitHub Exploit DB Packet Storm
213967 6.5 警告 Magento, Inc. - Magento Community Edition および Enterprise Edition の Mage_Core_Block_Template_Zend クラスにおける任意の PHP ファイルを組み込まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-3458 2015-05-7 11:22 2015-02-9 Show GitHub Exploit DB Packet Storm
213968 5 警告 Magento, Inc. - Magento Community Edition および Enterprise Edition における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2015-3457 2015-05-7 11:22 2015-02-9 Show GitHub Exploit DB Packet Storm
213969 6.5 警告 Magento, Inc. - Magento Community Edition および Enterprise Edition の Mage_Core_Block_Template_Zend クラスにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2015-1399 2015-05-7 11:22 2015-02-9 Show GitHub Exploit DB Packet Storm
213970 4 警告 レッドハット - OpenStack Dashboard 用 Red Hat redhat-access-plugin の log-viewing 関数における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-0271 2015-05-1 17:34 2015-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
51 6.5 MEDIUM
Network 		- - Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authe… New CWE-22
Path Traversal 		CVE-2026-11442 2026-06-13 09:16 2026-06-13 Show GitHub Exploit DB Packet Storm
52 7.8 HIGH
Local 		- - Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine proc… New CWE-787
 Out-of-bounds Write 		CVE-2026-6676 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
53 7.4 HIGH
Network 		- - Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the pare… New CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2026-12068 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
54 7.8 HIGH
Local 		- - Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This… New CWE-125
Out-of-bounds Read 		CVE-2025-9033 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
55 7.8 HIGH
Local 		- - Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process… New CWE-125
Out-of-bounds Read 		CVE-2025-9032 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
56 7.8 HIGH
Local 		- - Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2025-14098 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
57 - - - An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with object editing permissions to assign a MISP object, or attributes contained within an object, to a sharing … New CWE-863
 Incorrect Authorization 		CVE-2026-54398 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
58 - - - Rejected reason: CVE ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-53826. Reason: This candidate is a duplicate of CVE-2025-53826. Notes: All CVE users should reference CVE-2025… New - CVE-2026-54095 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
59 7.5 HIGH
Network 		- - Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-53868 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
60 4.3 MEDIUM
Network 		- - Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated… New CWE-459
 Incomplete Cleanup 		CVE-2026-53867 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm