Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
214161	6.8	警告	Template CMS project	-	Template CMS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4902	2015-05-22 14:54	2012-10-3	Show	GitHub Exploit DB Packet Storm

214162	4.3	警告	Template CMS project	-	Template CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4901	2015-05-22 14:54	2012-10-3	Show	GitHub Exploit DB Packet Storm

214163	7.5	危険	MySQL AB アップル zlib サン・マイクロシステムズ Debian FreeBSD ターボリナックスヒューレット・パッカード SUSE Fedora Project レッドハット	-	データ圧縮ライブラリ zlib におけるバッファーオーバーフローの脆弱性	-	CVE-2005-2096	2015-05-22 14:31	2005-07-6	Show	GitHub Exploit DB Packet Storm

214164	5	警告	ターボリナックス MySQL AB レッドハット	-	zlib における不正な圧縮ファイルによるバッファオーバーフローの脆弱性	-	CVE-2005-1849	2015-05-22 14:29	2005-07-21	Show	GitHub Exploit DB Packet Storm

214165	5	警告	bzip.org アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	bzip2 の解凍時における無限ループによるサービス運用妨害 (DoS) の脆弱性	-	CVE-2005-1260	2015-05-22 14:28	2005-05-23	Show	GitHub Exploit DB Packet Storm

214166	3.7	注意	bzip.org アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	bzip2 の解凍処理における競合状態の脆弱性	-	CVE-2005-0953	2015-05-22 14:28	2005-05-27	Show	GitHub Exploit DB Packet Storm

214167	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社ターボリナックスレッドハット	-	Zlib の gzprintf() におけるバッファオーバーフローの脆弱性	-	CVE-2003-0107	2015-05-22 14:27	2003-02-22	Show	GitHub Exploit DB Packet Storm

214168	6.8	警告	Kazuhiro Inaba 木村利靖	-	BGA32.DLL および QBga32.DLL における複数の脆弱性	CWE-Other その他	CVE-2003-0107 CVE-2005-0953 CVE-2005-1260 CVE-2005-1849 CVE-2005-2096	2015-05-22 14:25	2015-05-19	Show	GitHub Exploit DB Packet Storm

214169	4.3	警告	SEOgento	-	Magento 用 SEOgento プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3243	2015-05-22 13:49	2012-01-11	Show	GitHub Exploit DB Packet Storm

214170	6.8	警告	osCMax.com	-	osCMax の管理パネルにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-6691	2015-05-22 13:43	2012-04-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
521	9.9	CRITICAL Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember user can create a scheduled cron task with Cov…	CWE-78 CWE-269 CWE-862 OS Command Improper Privilege Management Missing Authorization	CVE-2026-46716	2026-06-16 06:17	2026-06-13	Show	GitHub Exploit DB Packet Storm

522	8.1	HIGH Network	-	-	SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strings in the api_tokens database table. Any…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-46622	2026-06-16 06:17	2026-06-12	Show	GitHub Exploit DB Packet Storm

523	7.6	HIGH Network	-	-	ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 contain an authenticated server-side request forgery (SSRF) in the rich-text widget import flow.…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45012	2026-06-16 06:17	2026-06-13	Show	GitHub Exploit DB Packet Storm

524	7.8	HIGH Local	-	-	A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can c…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-54228	2026-06-16 06:09	2026-06-13	Show	GitHub Exploit DB Packet Storm

525	7.0	HIGH Local	-	-	A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files …	CWE-362 Race Condition	CVE-2026-54229	2026-06-16 06:09	2026-06-13	Show	GitHub Exploit DB Packet Storm

526	7.0	HIGH Local	-	-	A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the t…	CWE-59 Link Following	CVE-2026-54230	2026-06-16 06:09	2026-06-13	Show	GitHub Exploit DB Packet Storm

527	5.5	MEDIUM Local	-	-	A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and w…	CWE-74 Injection	CVE-2026-54231	2026-06-16 06:09	2026-06-13	Show	GitHub Exploit DB Packet Storm

528	6.5	MEDIUM Network	-	-	A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte count to a bit-reader API that expects …	CWE-617 Reachable Assertion	CVE-2026-52718	2026-06-16 06:09	2026-06-16	Show	GitHub Exploit DB Packet Storm

529	7.1	HIGH Network	-	-	An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against avai…	CWE-125 Out-of-bounds Read	CVE-2026-52719	2026-06-16 06:09	2026-06-16	Show	GitHub Exploit DB Packet Storm

530	8.8	HIGH Network	-	-	A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VN…	CWE-122 Heap-based Buffer Overflow	CVE-2026-52720	2026-06-16 06:09	2026-06-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed