Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216521 4.3 警告 MediaWiki - MediaWiki の mediawiki.page.image.pagination.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5242 2014-12-17 18:02 2014-07-31 Show GitHub Exploit DB Packet Storm
216522 6.8 警告 MediaWiki - MediaWiki の includes/api/ApiFormatJson.php の JSONP エンドポイントにおけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5241 2014-12-17 18:00 2014-07-31 Show GitHub Exploit DB Packet Storm
216523 2.1 注意 Fabrice Bellard - QEMU の VGA エミュレータにおけるホストメモリを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-3615 2014-12-17 17:50 2014-09-4 Show GitHub Exploit DB Packet Storm
216524 4.9 警告 Linux - Linux Kernel の xfs の実装の fs/xfs/xfs_da_btree.c 内の xfs_da3_fixhashpath 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-7283 2014-12-17 17:47 2014-04-26 Show GitHub Exploit DB Packet Storm
216525 2.1 注意 OpenStack - 複数の OpenStack 製品の strutils.mask_password 関数におけるパスワードを取得される脆弱性 CWE-200
情報漏えい
CVE-2014-7231 2014-12-17 17:45 2014-10-6 Show GitHub Exploit DB Packet Storm
216526 2.1 注意 OpenStack - 複数の OpenStack 製品の processutils.execute 関数におけるパスワードを取得される脆弱性 CWE-200
情報漏えい
CVE-2014-7230 2014-12-17 17:44 2014-09-5 Show GitHub Exploit DB Packet Storm
216527 2.6 注意 オラクル - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-6527 2014-12-17 17:34 2014-10-14 Show GitHub Exploit DB Packet Storm
216528 5 警告 オラクル - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-6476 2014-12-17 17:31 2014-10-14 Show GitHub Exploit DB Packet Storm
216529 6.4 警告 アドビシステムズ - Windows 上で稼働する Adobe Reader および Acrobat におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-362
競合状態
CVE-2014-9150 2014-12-17 17:27 2014-11-26 Show GitHub Exploit DB Packet Storm
216530 6.4 警告 フォーティネット - FortiNet FortiADC-E のファームウェアおよび Coyote Point Equalizer のファームウェアにおける任意のサブネットへのアクセス権を取得される脆弱性 CWE-noinfo
情報不足
CVE-2014-8582 2014-12-17 17:18 2014-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1151 6.1 MEDIUM
Network
- - Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after… CWE-601
Open Redirect
CVE-2026-41706 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1152 4.4 MEDIUM
Network
- - Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.… CWE-330
 Use of Insufficiently Random Values
CVE-2026-41701 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1153 4.8 MEDIUM
Network
- - Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). An attacker can sup… CWE-943
 Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-41697 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1154 5.9 MEDIUM
Network
- - Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to … CWE-943
 Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-41696 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1155 7.5 HIGH
Network
- - Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolutio… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-41695 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1156 3.7 LOW
Network
- - Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloa… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-41694 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1157 6.1 MEDIUM
Network
- - Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an inva… CWE-601
Open Redirect
CVE-2026-41008 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1158 7.6 HIGH
Network
- - An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 throug… CWE-79
Cross-site Scripting
CVE-2026-41003 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1159 7.3 HIGH
Adjacent
- - An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the col… CWE-502
 Deserialization of Untrusted Data
CVE-2026-40993 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1160 5.9 MEDIUM
Network
- - When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a maliciou… CWE-611
XXE
CVE-2026-40991 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm