Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
221911 9.3 危険 シスコシステムズ - Cisco Wide Area Application Services における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-2196 2014-05-28 11:41 2014-05-21 Show GitHub Exploit DB Packet Storm
221912 8.5 危険 CosCMS - CosCMS の upload/index.php 内の uploadFile 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-1668 2014-05-28 11:41 2013-02-19 Show GitHub Exploit DB Packet Storm
221913 6.1 警告 シスコシステムズ - ASR 1000 シリーズのデバイス上で稼働する Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3284 2014-05-28 11:37 2014-05-27 Show GitHub Exploit DB Packet Storm
221914 7.1 危険 IBM - IBM WebSphere Commerce におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0943 2014-05-28 11:24 2014-05-12 Show GitHub Exploit DB Packet Storm
221915 4.3 警告 isync-devel - Isync における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2013-0289 2014-05-28 10:38 2013-02-3 Show GitHub Exploit DB Packet Storm
221916 6.8 警告 Apache Software Foundation - Apache CouchDB における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-5649 2014-05-28 10:25 2012-10-24 Show GitHub Exploit DB Packet Storm
221917 10 危険 Mozilla Foundation - 複数の Mozilla 製品の libxul.so の nsHostResolver::ConditionallyRefreshRecord 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1532 2014-05-27 17:38 2014-04-29 Show GitHub Exploit DB Packet Storm
221918 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsGenericHTMLElement::GetWidthHeightForImage 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1531 2014-05-27 17:37 2014-04-29 Show GitHub Exploit DB Packet Storm
221919 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の docshell 実装における偽装された baseURI プロパティで URL の読み込みを誘発される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1530 2014-05-27 17:36 2014-04-29 Show GitHub Exploit DB Packet Storm
221920 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の Web Notification API におけるソースコンポーネントの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1529 2014-05-27 17:34 2014-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3581 5.4 MEDIUM
Network
accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated attacker to execute arbitrary JavaScript code… CWE-79
Cross-site Scripting
CVE-2026-24754 2026-06-4 00:28 2026-06-2 Show GitHub Exploit DB Packet Storm
3582 5.4 MEDIUM
Network
accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permi… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-24755 2026-06-4 00:27 2026-06-2 Show GitHub Exploit DB Packet Storm
3583 4.3 MEDIUM
Network
accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resou… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-24756 2026-06-4 00:26 2026-06-2 Show GitHub Exploit DB Packet Storm
3584 4.3 MEDIUM
Network
accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metad… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-24761 2026-06-4 00:17 2026-06-2 Show GitHub Exploit DB Packet Storm
3585 8.8 HIGH
Network
accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBui… CWE-89
SQL Injection
CVE-2026-24782 2026-06-4 00:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3586 9.8 CRITICAL
Network
trendnet tew-432brp_firmware A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to comma… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-10060 2026-06-3 23:39 2026-05-29 Show GitHub Exploit DB Packet Storm
3587 9.8 CRITICAL
Network
trendnet tew-432brp_firmware A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command injection. The atta… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-10061 2026-06-3 23:36 2026-05-29 Show GitHub Exploit DB Packet Storm
3588 7.8 HIGH
Local
google android In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation of privilege with no additional execution… CWE-693
 Protection Mechanism Failure
CVE-2025-48649 2026-06-3 23:35 2026-06-2 Show GitHub Exploit DB Packet Storm
3589 6.8 MEDIUM
Physics
opensc_project opensc OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trig… CWE-121
Stack-based Buffer Overflow
CVE-2026-40510 2026-06-3 23:30 2026-05-29 Show GitHub Exploit DB Packet Storm
3590 7.8 HIGH
Local
opensc_project opensc OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memor… CWE-121
CWE-122
Stack-based Buffer Overflow
Heap-based Buffer Overflow
CVE-2026-40528 2026-06-3 23:28 2026-05-29 Show GitHub Exploit DB Packet Storm