Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215181 5 警告 Zenoss, Inc. - Zenoss Core における資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9250 2014-12-17 16:54 2014-12-5 Show GitHub Exploit DB Packet Storm
215182 7.5 危険 Zenoss, Inc. - Zenoss Core のデフォルト設定におけるデータベースの情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9249 2014-12-17 16:51 2014-12-5 Show GitHub Exploit DB Packet Storm
215183 5 警告 Zenoss, Inc. - Zenoss Core におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-9248 2014-12-17 16:50 2014-12-5 Show GitHub Exploit DB Packet Storm
215184 4 警告 Zenoss, Inc. - Zenoss Core における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9247 2014-12-17 16:49 2014-12-5 Show GitHub Exploit DB Packet Storm
215185 5 警告 Zenoss, Inc. - Zenoss Core における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9245 2014-12-17 16:48 2014-12-5 Show GitHub Exploit DB Packet Storm
215186 9.3 危険 Zenoss, Inc. - Zenoss Core における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-6261 2014-12-17 16:46 2014-12-5 Show GitHub Exploit DB Packet Storm
215187 6.8 警告 Zenoss, Inc. - Zenoss Core における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2014-6260 2014-12-17 16:45 2014-12-5 Show GitHub Exploit DB Packet Storm
215188 5 警告 Zenoss, Inc. - Zenoss Core におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-6259 2014-12-17 16:44 2014-12-5 Show GitHub Exploit DB Packet Storm
215189 5 警告 Zenoss, Inc. - Zenoss Core の不特定のエンドポイントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-6258 2014-12-17 16:34 2014-12-5 Show GitHub Exploit DB Packet Storm
215190 5 警告 Zenoss, Inc. - Zenoss Core におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-6257 2014-12-17 16:32 2014-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2691 7.3 HIGH
Network 		- - A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer ove… CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow 		CVE-2026-9605 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2692 6.3 MEDIUM
Network 		- - A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can … CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-9581 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2693 7.5 HIGH
Network 		archive\ \ Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), … CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-9538 2026-05-28 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2694 7.5 HIGH
Network 		- - The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key. CWE-524
 Use of Cache Containing Sensitive Information 		CVE-2026-48901 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2695 7.8 HIGH
Local 		- - A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker ca… CWE-787
 Out-of-bounds Write 		CVE-2026-48864 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2696 7.7 HIGH
Network 		- - Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking the IP blacklist, … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45715 2026-05-28 23:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2697 10.0 CRITICAL
Network 		- - Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds to 0.0.0.0:6664 by de… CWE-15
CWE-78
CWE-306
 External Control of System or Configuration Setting
OS Command 
Missing Authentication for Critical Function 		CVE-2026-45087 2026-05-28 23:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2698 5.0 MEDIUM
Network 		- - Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash strings in four separate … CWE-78
CWE-1336
OS Command 
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-44723 2026-05-28 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2699 7.9 HIGH
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption… CWE-59
CWE-287
Link Following
Improper Authentication 		CVE-2026-44711 2026-05-28 23:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2700 7.5 HIGH
Network 		archive\ \ Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory. _make_special_file() passes the tar header's linkname to link() without va… CWE-59
CWE-732
Link Following
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-42497 2026-05-28 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm