Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216901 5 警告 ヒューレット・パッカード
Apache Software Foundation
- Apache Tomcat におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1184 2015-03-26 17:12 2011-04-1 Show GitHub Exploit DB Packet Storm
216902 5 警告 アップル
Apache Software Foundation
ヒューレット・パッカード
レッドハット
- Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-0534 2015-03-26 17:07 2011-01-27 Show GitHub Exploit DB Packet Storm
216903 4.3 警告 Apache Software Foundation
アップル
ヒューレット・パッカード
オラクル
Novell
レッドハット
- Apache Tomcat の HTML Manager Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0013 2015-03-26 17:03 2010-11-12 Show GitHub Exploit DB Packet Storm
216904 4.3 警告 アップル
Apache Software Foundation
ヒューレット・パッカード
レッドハット
- Apache Tomcat の Manager アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4172 2015-03-26 16:50 2010-11-22 Show GitHub Exploit DB Packet Storm
216905 6.8 警告 IBM - IBM Rational ClearQuest の ClearQuest Web におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-8925 2015-03-26 16:39 2014-11-14 Show GitHub Exploit DB Packet Storm
216906 1.9 注意 IBM - Windows 上で稼働する IBM Tivoli Identity Manager Active Directory アダプタおよび IBM Security Identity Manager 用 IBM Security Identity Manager Active Directory アダプタにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-8923 2015-03-26 16:39 2014-11-14 Show GitHub Exploit DB Packet Storm
216907 1.2 注意 IBM - IBM Rational ClearCase における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-6134 2015-03-26 16:39 2014-09-2 Show GitHub Exploit DB Packet Storm
216908 5 警告 GNU Project - GnuTLS におけるダウングレード攻撃を実行される脆弱性 CWE-310
暗号の問題
CVE-2015-0282 2015-03-26 14:49 2015-03-15 Show GitHub Exploit DB Packet Storm
216909 10 危険 SolarWinds - SolarWinds Firewall Security Manager の userlogin.jsp における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-2284 2015-03-26 13:54 2015-03-13 Show GitHub Exploit DB Packet Storm
216910 1.2 注意 日本電気
Apache Software Foundation
アップル
ヒューレット・パッカード
オラクル
Novell
レッドハット
- Apache Tomcat におけるワーキングディレクトリ外のファイルを読み書きされる脆弱性 CWE-DesignError
CVE-2010-3718 2015-03-25 18:11 2010-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1471 4.4 MEDIUM
Local
- - Pi is a minimal terminal coding harness. Pi before 0.79.0 loaded project-local configuration and resources from a repository's .pi directory without first asking the user to trust that repository. Th… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-54325 2026-06-26 01:14 2026-06-24 Show GitHub Exploit DB Packet Storm
1472 6.2 MEDIUM
Local
- - A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One mechanism logs session identifiers, whic… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-9073 2026-06-26 01:14 2026-06-24 Show GitHub Exploit DB Packet Storm
1473 - - - Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW during a hitless upda… CWE-253
 Incorrect Check of Function Return Value
CVE-2026-5818 2026-06-26 01:14 2026-06-24 Show GitHub Exploit DB Packet Storm
1474 - - - Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results in an incorrect GCM authentication tag. When the streaming AES-256-GCM API is used with empty AAD, the hardwar… CWE-325
 Missing Required Cryptographic Step
CVE-2026-6458 2026-06-26 01:14 2026-06-24 Show GitHub Exploit DB Packet Storm
1475 5.8 MEDIUM
Network
- - Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, when making an external request, it is possible to bypass the IP filter that ensures the request isn't going to an internal serv… CWE-184
CWE-918
 Incomplete Blacklist
Server-Side Request Forgery (SSRF) 
CVE-2026-53944 2026-06-26 01:07 2026-06-25 Show GitHub Exploit DB Packet Storm
1476 5.4 MEDIUM
Network
- - Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, insufficient validation of the client-supplied Content-Type on Ghost's Admin API file upload endpoint allowed uploaded files to… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-53948 2026-06-26 01:07 2026-06-25 Show GitHub Exploit DB Packet Storm
1477 5.3 MEDIUM
Network
- - Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to filters on the public API endpoints could be partially bypassed, making it possible to reveal private… CWE-200
CWE-693
Information Exposure
 Protection Mechanism Failure
CVE-2026-53949 2026-06-26 01:07 2026-06-25 Show GitHub Exploit DB Packet Storm
1478 7.5 HIGH
Network
- - @tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, the ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously customised Activ… CWE-79
Cross-site Scripting
CVE-2026-53950 2026-06-26 01:07 2026-06-25 Show GitHub Exploit DB Packet Storm
1479 5.7 MEDIUM
Network
- - Jellyfin is an open source self hosted media server. Prior to 10.11.9, a potential XSS attack exists in Jellyfin which can allow a non-privileged user to execute arbitrary Javascript in the context o… CWE-79
Cross-site Scripting
CVE-2026-49220 2026-06-26 01:06 2026-06-25 Show GitHub Exploit DB Packet Storm
1480 9.6 CRITICAL
Network
- - Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results in cached content being shared between different visitors, an unauthenticate… CWE-524
 Use of Cache Containing Sensitive Information
CVE-2026-53943 2026-06-26 01:06 2026-06-25 Show GitHub Exploit DB Packet Storm