Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220331	7.2	危険	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2595	2014-09-3 15:44	2013-05-1	Show	GitHub Exploit DB Packet Storm

220332	4.3	警告	Linux	-	Linux Kernel の virt/kvm/iommu.c 内の kvm_iommu_map_pages 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-3601	2014-09-3 15:12	2014-08-19	Show	GitHub Exploit DB Packet Storm

220333	2.1	注意	Ganeti project	-	Ganeti の lib/client/gnt_cluster.py の _UpgradeBeforeConfigurationChange 関数における SSL キーを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-5247	2014-09-3 14:27	2014-08-5	Show	GitHub Exploit DB Packet Storm

220334	7.5	危険	VMTurbo	-	VMTurbo Operations Manager の vmtadmin.cgi における任意のコマンドを実行される脆弱性	CWE-Other その他	CVE-2014-5073	2014-09-3 14:13	2014-07-25	Show	GitHub Exploit DB Packet Storm

220335	6.6	警告	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで同梱される Linux Kernel ブートローダにおける署名検証コードを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-2598	2014-09-3 14:02	2013-09-6	Show	GitHub Exploit DB Packet Storm

220336	4.3	警告	Xen プロジェクト	-	Xen におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-5147	2014-09-3 13:41	2014-08-12	Show	GitHub Exploit DB Packet Storm

220337	4.3	警告	シスコシステムズ	-	Cisco Intelligent Automation for Cloud における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2014-3352	2014-09-3 12:24	2014-08-29	Show	GitHub Exploit DB Packet Storm

220338	6.8	警告	マカフィー	-	McAfee Network Security Manager の User Management モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-2390	2014-09-3 12:18	2014-07-24	Show	GitHub Exploit DB Packet Storm

220339	5	警告	Innovative Interfaces Inc.	-	Innovative Interfaces Encore Discovery Solution における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-5128	2014-09-3 12:03	2014-08-26	Show	GitHub Exploit DB Packet Storm

220340	5.8	警告	Innovative Interfaces Inc.	-	Innovative Interfaces Encore Discovery Solution におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2014-5127	2014-09-3 11:59	2014-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
321	7.1	HIGH Network	-	-	Unauthenticated Cross Site Scripting (XSS) in iRobots.txt SEO <= 1.1.2 versions. New	CWE-79 Cross-site Scripting	CVE-2025-68840	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

322	7.1	HIGH Network	-	-	Unauthenticated Cross Site Scripting (XSS) in Okay Toolkit <= 2.3 versions. New	CWE-79 Cross-site Scripting	CVE-2025-68851	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

323	7.1	HIGH Network	-	-	Unauthenticated Cross Site Scripting (XSS) in Eli's WordCents adSense Widget with Analytics <= 1.3.03.27 versions. New	CWE-79 Cross-site Scripting	CVE-2025-68872	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

324	6.5	MEDIUM Network	-	-	Subscriber Broken Access Control in Bookify <= 1.1.1 versions. New	CWE-862 Missing Authorization	CVE-2025-69332	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

325	7.1	HIGH Network	-	-	Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7 <= 3.2.8 versions. New	CWE-79 Cross-site Scripting	CVE-2026-23970	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

326	8.5	HIGH Network	-	-	Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions. New	CWE-89 SQL Injection	CVE-2026-24637	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

327	7.5	HIGH Network	-	-	Unauthenticated Broken Access Control in User Registration <= 5.1.2 versions. New	CWE-862 Missing Authorization	CVE-2026-25425	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

328	5.3	MEDIUM Network	-	-	Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions. New	CWE-862 Missing Authorization	CVE-2026-25440	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

329	9.8	CRITICAL Network	-	-	Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions. New	CWE-502 Deserialization of Untrusted Data	CVE-2026-27053	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm

330	7.5	HIGH Network	-	-	Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions. New	CWE-290 Authentication Bypass by Spoofing	CVE-2026-27089	2026-06-16 06:24	2026-06-16	Show	GitHub Exploit DB Packet Storm