Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218271 4 警告 IBM - IBM WebSphere Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-4792 2014-09-16 14:51 2014-09-15 Show GitHub Exploit DB Packet Storm
218272 3.5 注意 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4762 2014-09-16 14:48 2014-09-15 Show GitHub Exploit DB Packet Storm
218273 5 警告 Ecava - Ecava IntegraXor SCADA サーバにおけるフルパス名を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2377 2014-09-16 14:35 2014-09-11 Show GitHub Exploit DB Packet Storm
218274 7.5 危険 Ecava - Ecava IntegraXor SCADA サーバにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2376 2014-09-16 14:34 2014-09-11 Show GitHub Exploit DB Packet Storm
218275 9 危険 Ecava - Ecava IntegraXor SCADA サーバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-2375 2014-09-16 14:34 2014-09-11 Show GitHub Exploit DB Packet Storm
218276 4.3 警告 Avolve Software - Avolve Software ProjectDox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5129 2014-09-16 11:07 2014-09-3 Show GitHub Exploit DB Packet Storm
218277 7.5 危険 PhpWiki - PhpWiki の Ploticus モジュールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-5519 2014-09-16 09:55 2014-08-27 Show GitHub Exploit DB Packet Storm
218278 4.3 警告 Adiscon - Adiscon LogAnalyzer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-6070 2014-09-12 19:08 2014-09-2 Show GitHub Exploit DB Packet Storm
218279 7.5 危険 Plogger Project - Plogger の plog-admin/plog-upload.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-2223 2014-09-12 19:04 2014-02-27 Show GitHub Exploit DB Packet Storm
218280 6 警告 CacheGuard Technologies Ltd. - CacheGuard OS にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-4865 2014-09-12 17:56 2014-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
951 8.8 HIGH
Network 		tauri tauri Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri's is_local_url() function causes it to incorrectly classify remote URLs as trusted loca… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42184 2026-06-2 09:52 2026-05-28 Show GitHub Exploit DB Packet Storm
952 8.8 HIGH
Network 		dalibo anonymizer PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an… CWE-89
SQL Injection 		CVE-2026-9617 2026-06-2 09:40 2026-05-27 Show GitHub Exploit DB Packet Storm
953 6.8 MEDIUM
Network 		gradio_project gradio Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across… CWE-384
 Session Fixation 		CVE-2026-48545 2026-06-2 09:34 2026-05-28 Show GitHub Exploit DB Packet Storm
954 5.5 MEDIUM
Local 		- - A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a … CWE-476
 NULL Pointer Dereference 		CVE-2025-60495 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
955 5.5 MEDIUM
Local 		- - A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 file. CWE-416
 Use After Free 		CVE-2025-60486 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
956 5.5 MEDIUM
Local 		- - A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a cr… CWE-476
 NULL Pointer Dereference 		CVE-2025-60485 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
957 5.5 MEDIUM
Local 		- - A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) … CWE-476
 NULL Pointer Dereference 		CVE-2025-60483 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
958 5.5 MEDIUM
Local 		- - A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted… CWE-476
 NULL Pointer Dereference 		CVE-2025-60481 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
959 5.5 MEDIUM
Local 		- - A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-122
Heap-based Buffer Overflow 		CVE-2025-55664 2026-06-2 09:16 2026-06-2 Show GitHub Exploit DB Packet Storm
960 8.1 HIGH
Network 		- - LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, the setup database configuration flow on uninitialized LinkAce instances accepts attacker-controlled database credential fie… CWE-74
Injection 		CVE-2026-45344 2026-06-2 06:16 2026-05-29 Show GitHub Exploit DB Packet Storm