Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218531 5 警告 IBM - IBM WebSphere Application Server の addFileRegistryAccount Virtual Member Manager SPI Admin Task におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3070 2014-08-25 16:54 2014-08-18 Show GitHub Exploit DB Packet Storm
218532 3.5 注意 OpenStack - OpenStack Dashboard の Host Aggregate インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3594 2014-08-25 16:50 2014-08-20 Show GitHub Exploit DB Packet Storm
218533 10 危険 Apache Software Foundation - Apache Traffic Server における脆弱性 CWE-noinfo
情報不足
CVE-2014-3525 2014-08-25 16:49 2014-07-23 Show GitHub Exploit DB Packet Storm
218534 4.3 警告 Apache Software Foundation - Apache OFBiz の framework/common/webcommon/includes/messages.ftl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0232 2014-08-25 16:49 2014-08-19 Show GitHub Exploit DB Packet Storm
218535 5 警告 シマンテック - Symantec Encryption Desktop および Symantec PGP Desktop におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題
CVE-2014-3436 2014-08-25 15:57 2014-08-21 Show GitHub Exploit DB Packet Storm
218536 7.5 危険 The Cacti Group - Cacti の graph settings スクリプトにおける任意のコマンドを実行される脆弱性 CWE-89
SQLインジェクション
CVE-2014-5262 2014-08-25 15:33 2014-06-28 Show GitHub Exploit DB Packet Storm
218537 7.5 危険 The Cacti Group - Cacti の graph settings スクリプトにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-5261 2014-08-25 15:33 2014-06-28 Show GitHub Exploit DB Packet Storm
218538 5.8 警告 Esri - ESRI ArcGIS for Server におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-5122 2014-08-25 15:06 2014-08-15 Show GitHub Exploit DB Packet Storm
218539 4.3 警告 Esri - ESRI ArcGIS for Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5121 2014-08-25 15:06 2014-08-15 Show GitHub Exploit DB Packet Storm
218540 7.5 危険 Free Reprintables - Free Reprintables ArticleFR における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5097 2014-08-25 14:55 2014-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
591 5.5 MEDIUM
Local
- - A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, le… New CWE-416
 Use After Free
CVE-2026-50263 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
592 7.8 HIGH
Local
- - An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFro… New CWE-787
 Out-of-bounds Write
CVE-2026-50264 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
593 3.3 LOW
Local
- - A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler. Performing a mani… New CWE-404
CWE-407
 Improper Resource Shutdown or Release
 Inefficient Algorithmic Complexity
CVE-2026-11312 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
594 10.0 CRITICAL
Network
- - Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro fo… New CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-49777 2026-06-5 22:26 2026-06-5 Show GitHub Exploit DB Packet Storm
595 3.6 LOW
Local
- - A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of… New CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash
CVE-2026-11329 2026-06-5 22:26 2026-06-5 Show GitHub Exploit DB Packet Storm
596 7.2 HIGH
Network
- - A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injection. It is possible to … New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10870 2026-06-5 22:26 2026-06-5 Show GitHub Exploit DB Packet Storm
597 7.2 HIGH
Network
- - A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulation of the argument ipv… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10871 2026-06-5 22:26 2026-06-5 Show GitHub Exploit DB Packet Storm
598 7.2 HIGH
Network
- - A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command inj… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10872 2026-06-5 22:26 2026-06-5 Show GitHub Exploit DB Packet Storm
599 7.2 HIGH
Network
- - A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command inject… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10873 2026-06-5 22:26 2026-06-5 Show GitHub Exploit DB Packet Storm
600 6.3 MEDIUM
Network
- - A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument soc… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10874 2026-06-5 22:26 2026-06-5 Show GitHub Exploit DB Packet Storm