Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214991 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3674 2015-05-11 15:53 2009-12-8 Show GitHub Exploit DB Packet Storm
214992 9.3 危険 マイクロソフト - 複数の Microsoft 製品における FEATHEADER レコードの処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3129 2015-05-11 15:52 2009-11-10 Show GitHub Exploit DB Packet Storm
214993 9.3 危険 マイクロソフト - Microsoft Office Word の .doc ファイル処理おける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2244 2015-05-11 15:51 2008-07-8 Show GitHub Exploit DB Packet Storm
214994 4 警告 IBM - IBM Rational License Key Server の Administration and Reporting Tool における Cookie を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-1907 2015-05-11 15:18 2015-04-22 Show GitHub Exploit DB Packet Storm
214995 4 警告 IBM - 複数の OS 上で稼動する IBM DB2 における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-0919 2015-05-11 14:42 2014-10-6 Show GitHub Exploit DB Packet Storm
214996 2.1 注意 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される JBoss SX および PicketBox における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-0059 2015-05-11 14:36 2014-05-27 Show GitHub Exploit DB Packet Storm
214997 3.5 注意 レッドハット - Red Hat JBoss Enterprise Application Platform の JBoss Security におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-7827 2015-05-8 18:09 2014-11-5 Show GitHub Exploit DB Packet Storm
214998 6.4 警告 レッドハット - RESTEasy の DocumentProvider における XML 外部エンティティ攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-7839 2015-05-8 18:09 2014-11-18 Show GitHub Exploit DB Packet Storm
214999 4.3 警告 レッドハット - Red Hat JBoss Weld における情報を取得される脆弱性 CWE-362
競合状態 		CVE-2014-8122 2015-05-8 18:07 2014-12-4 Show GitHub Exploit DB Packet Storm
215000 7.5 危険 富士通
サイバートラスト株式会社
Apache Software Foundation		 - Apache Struts において ClassLoader が操作可能な脆弱性 CWE-DesignError
CVE-2014-0094
CVE-2014-0112 		2015-05-8 17:58 2014-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3651 7.5 HIGH
Network 		jg-rp python_liquid Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search pa… CWE-22
Path Traversal 		CVE-2026-45017 2026-06-3 09:43 2026-05-29 Show GitHub Exploit DB Packet Storm
3652 - - - Rejected reason: This CVE is a duplicate of another CVE. - CVE-2026-42029 2026-06-3 07:16 2026-06-3 Show GitHub Exploit DB Packet Storm
3653 7.5 HIGH
Network 		- - The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This i… CWE-89
SQL Injection 		CVE-2026-5073 2026-06-3 05:56 2026-06-3 Show GitHub Exploit DB Packet Storm
3654 6.5 MEDIUM
Network 		- - The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This… CWE-89
SQL Injection 		CVE-2026-5074 2026-06-3 05:56 2026-06-3 Show GitHub Exploit DB Packet Storm
3655 9.8 CRITICAL
Network 		- - The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset k… CWE-287
Improper Authentication 		CVE-2026-5076 2026-06-3 05:56 2026-06-3 Show GitHub Exploit DB Packet Storm
3656 9.8 CRITICAL
Network 		synology beestation_os Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via … CWE-120
Classic Buffer Overflow 		CVE-2025-12686 2026-06-3 05:43 2026-05-27 Show GitHub Exploit DB Packet Storm
3657 9.8 CRITICAL
Network 		synology diskstation_manager Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) allows remote atta… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2025-13392 2026-06-3 05:42 2026-05-27 Show GitHub Exploit DB Packet Storm
3658 7.5 HIGH
Network 		synology c2_identity_edge_server An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. CWE-749
 Exposed Dangerous Method or Function 		CVE-2025-14713 2026-06-3 05:41 2026-05-27 Show GitHub Exploit DB Packet Storm
3659 8.6 HIGH
Network 		synology active_backup_for_business A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. CWE-89
SQL Injection 		CVE-2025-30028 2026-06-3 05:41 2026-05-27 Show GitHub Exploit DB Packet Storm
3660 5.9 MEDIUM
Network 		synology safe_access Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authenticated users with admi… CWE-79
Cross-site Scripting 		CVE-2025-10466 2026-06-3 05:30 2026-05-27 Show GitHub Exploit DB Packet Storm