Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213961 10 危険 サムスン - Samsung Security Manager における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-3435 2015-05-7 14:23 2015-04-29 Show GitHub Exploit DB Packet Storm
213962 5 警告 Novell
Python Software Foundation
- Pillow の Jpeg2KImagePlugin プラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-3598 2015-05-7 14:14 2014-08-18 Show GitHub Exploit DB Packet Storm
213963 5 警告 シスコシステムズ - Cisco ASR 5000 デバイス上で稼動する StarOS の session-manager サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-0712 2015-05-7 14:02 2015-04-29 Show GitHub Exploit DB Packet Storm
213964 4.3 警告 シスコシステムズ - Cisco Finesse サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0714 2015-05-7 12:35 2015-05-1 Show GitHub Exploit DB Packet Storm
213965 5 警告 Novell
Xiph.Org
- Icecast におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-3026 2015-05-7 12:20 2015-04-8 Show GitHub Exploit DB Packet Storm
213966 7.5 危険 DELL EMC (旧 EMC Corporation) - EMC RSA Identity Management and Governance におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0532 2015-05-7 11:52 2015-04-29 Show GitHub Exploit DB Packet Storm
213967 6.5 警告 Magento, Inc. - Magento Community Edition および Enterprise Edition の Mage_Core_Block_Template_Zend クラスにおける任意の PHP ファイルを組み込まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-3458 2015-05-7 11:22 2015-02-9 Show GitHub Exploit DB Packet Storm
213968 5 警告 Magento, Inc. - Magento Community Edition および Enterprise Edition における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2015-3457 2015-05-7 11:22 2015-02-9 Show GitHub Exploit DB Packet Storm
213969 6.5 警告 Magento, Inc. - Magento Community Edition および Enterprise Edition の Mage_Core_Block_Template_Zend クラスにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2015-1399 2015-05-7 11:22 2015-02-9 Show GitHub Exploit DB Packet Storm
213970 4 警告 レッドハット - OpenStack Dashboard 用 Red Hat redhat-access-plugin の log-viewing 関数における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2015-0271 2015-05-1 17:34 2015-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 9.4 CRITICAL
Network
- - Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter t… New CWE-306
Missing Authentication for Critical Function
CVE-2026-49973 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
62 7.1 HIGH
Network
- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.0.14, cross-site GET request can trigger stored cron commands on… New CWE-352
 Origin Validation Error
CVE-2026-49396 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
63 7.7 HIGH
Network
- - Koel is a free, open-source music streaming solution. Prior to version 9.3.5, Koel validates the podcast feed URL via the SafeUrl rule (DNS resolution + public IP check), but the individual episode <… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-47260 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
64 6.5 MEDIUM
Network
- - ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of authorization. They can… New CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization
CVE-2026-47238 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
65 5.4 MEDIUM
Network
- - NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot (AVB) v… New CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound
CVE-2026-47223 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
66 - - - Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to before 3.21.6 and 4.0… New CWE-284
CWE-288
Improper Access Control
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-47200 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
67 - - - Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, a moderator with the relevant Discord permission bit can use the bot to moderate users above them in the Discord role hierarchy, as lon… New CWE-862
 Missing Authorization
CVE-2026-47197 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
68 - - - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The diagnostics_channel, … New CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-47141 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
69 10.0 CRITICAL
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookupSetter__, Buffer, "__proto_… New CWE-913
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-47131 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
70 7.7 HIGH
Network
- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, nezha's dashboard supports two user roles: RoleAdmin (Role=… New CWE-863
CWE-918
 Incorrect Authorization
Server-Side Request Forgery (SSRF) 
CVE-2026-46717 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm