Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215001 7.7 危険 シスコシステムズ - 複数の Cisco-Meraki デバイスのファームウェアにおける任意のファームウェアをインストールされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-7999 2015-01-5 11:13 2014-12-23 Show GitHub Exploit DB Packet Storm
215002 7.2 危険 シスコシステムズ - 複数の Cisco-Meraki デバイスのファームウェアにおけるシェルアクセスを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-7995 2015-01-5 11:10 2014-12-23 Show GitHub Exploit DB Packet Storm
215003 2.1 注意 MIT Kerberos - MIT Kerberos 5 の kadmind の lib/kadm5/srv/svr_principal.c の kadm5_randkey_principal_3 関数におけるチケットを偽造される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-5351 2014-12-26 09:57 2014-09-22 Show GitHub Exploit DB Packet Storm
215004 4.3 警告 シスコシステムズ - Cisco Prime Security Manager の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3364 2014-12-25 20:30 2014-12-12 Show GitHub Exploit DB Packet Storm
215005 3.5 注意 オラクル - Oracle Database Server の RDBMS Core における脆弱性 CWE-noinfo
情報不足
CVE-2014-4245 2014-12-25 18:35 2014-07-15 Show GitHub Exploit DB Packet Storm
215006 6.5 警告 オラクル - Oracle Database Server の RDBMS Core における脆弱性 CWE-noinfo
情報不足
CVE-2014-4236 2014-12-25 18:34 2014-07-15 Show GitHub Exploit DB Packet Storm
215007 5.8 警告 IBM - IBM SDK, Java Technology Edition の IBMJCE および IBMSecureRandom の暗号化プロバイダにおける暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2014-0878 2014-12-25 18:04 2014-05-5 Show GitHub Exploit DB Packet Storm
215008 5 警告 TP-LINK Technologies - TP-Link TL-WR740N のファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-9350 2014-12-25 18:03 2014-11-13 Show GitHub Exploit DB Packet Storm
215009 6.8 警告 サムスン - Samsung SmartViewer の STWConfig ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-9266 2014-12-25 17:59 2014-12-4 Show GitHub Exploit DB Packet Storm
215010 6.8 警告 3S Pocketnet Tech. Inc. - 3S Pocketnet Tech VMS の PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9263 2014-12-25 17:55 2014-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2741 4.3 MEDIUM
Network
jenkins bitbucket_oauth Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. CWE-601
Open Redirect
CVE-2026-48924 2026-05-29 01:59 2026-05-28 Show GitHub Exploit DB Packet Storm
2742 4.3 MEDIUM
Network
kostyasha github_integration A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request. CWE-352
 Origin Validation Error
CVE-2026-48925 2026-05-29 01:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2743 6.5 MEDIUM
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions han… CWE-704
CWE-754
 Incorrect Type Conversion or Cast
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-44324 2026-05-29 01:52 2026-05-28 Show GitHub Exploit DB Packet Storm
2744 5.5 MEDIUM
Network
jenkins buildgraph-view Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views. CWE-79
Cross-site Scripting
CVE-2026-48927 2026-05-29 01:52 2026-05-28 Show GitHub Exploit DB Packet Storm
2745 7.5 HIGH
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug family. The handler in N… CWE-20
CWE-755
CWE-843
 Improper Input Validation 
 Improper Handling of Exceptional Conditions
Type Confusion
CVE-2026-44325 2026-05-29 01:51 2026-05-28 Show GitHub Exploit DB Packet Storm
2746 4.3 MEDIUM
Network
jenkins multijob A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds. CWE-352
 Origin Validation Error
CVE-2026-9674 2026-05-29 01:51 2026-05-28 Show GitHub Exploit DB Packet Storm
2747 5.4 MEDIUM
Network
synology contacts Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users … CWE-79
Cross-site Scripting
CVE-2025-13167 2026-05-29 01:37 2026-05-27 Show GitHub Exploit DB Packet Storm
2748 9.4 CRITICAL
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-influence API without inbound OAuth2/bearer-token authorization. A network attac… CWE-862
 Missing Authorization
CVE-2026-44326 2026-05-29 01:25 2026-05-28 Show GitHub Exploit DB Packet Storm
2749 10.0 CRITICAL
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization. A network attacker wh… CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization
CVE-2026-44327 2026-05-29 01:24 2026-05-28 Show GitHub Exploit DB Packet Storm
2750 8.2 HIGH
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. On top of that, the DELETE /upi… CWE-306
CWE-476
CWE-862
Missing Authentication for Critical Function
 NULL Pointer Dereference
 Missing Authorization
CVE-2026-44328 2026-05-29 01:24 2026-05-28 Show GitHub Exploit DB Packet Storm