Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222491 7.2 危険 レッドハット - Red Hat Enterprise Virtualization で使用される SPICE サービスにおける権限を取得される脆弱性 CWE-Other
その他
CVE-2013-2152 2014-01-23 18:17 2013-06-10 Show GitHub Exploit DB Packet Storm
222492 3.2 注意 Linux NFS - nfs-utils の rpc-gssd におけるその他の制限ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-1923 2014-01-23 18:13 2013-04-3 Show GitHub Exploit DB Packet Storm
222493 7.2 危険 レッドハット - Red Hat Enterprise Virtualization における権限を取得される脆弱性 CWE-Other
その他
CVE-2013-2151 2014-01-23 18:12 2013-06-10 Show GitHub Exploit DB Packet Storm
222494 9.3 危険 Lenovo - Lenovo Thinkpad Bluetooth with Enhanced Data Rate ソフトウェアにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-1361 2014-01-23 17:57 2013-01-15 Show GitHub Exploit DB Packet Storm
222495 5 警告 Simon McVittie - Telepathy Gabble の特定のハッシュアルゴリズムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題
CVE-2013-1769 2014-01-23 17:55 2013-03-4 Show GitHub Exploit DB Packet Storm
222496 5.8 警告 Plone Foundation - Plone の in_portal.py の URLTool クラスにおける allow_external_login_sites フィルタリングプロパティを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4200 2014-01-23 17:52 2013-06-18 Show GitHub Exploit DB Packet Storm
222497 5 警告 WordPress.org - WordPress の wp-admin/includes/class-wp-posts-list-table.php における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6635 2014-01-23 17:48 2012-06-15 Show GitHub Exploit DB Packet Storm
222498 6.4 警告 WordPress.org - WordPress の wp-admin/media-upload.php における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6634 2014-01-23 17:35 2012-06-15 Show GitHub Exploit DB Packet Storm
222499 5.5 警告 Moodle - Moodle の course/loginas.php における "login as" アクションを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0009 2014-01-23 17:28 2014-01-20 Show GitHub Exploit DB Packet Storm
222500 4 警告 Moodle - Moodle の lib/adminlib.php における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0008 2014-01-23 17:27 2014-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1831 7.3 HIGH
Network
- - An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call. CWE-20
 Improper Input Validation 
CVE-2026-30760 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
1832 5.5 MEDIUM
Local
- - IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. _dosToUnixTime() decodes the local-file-header last-modification da… CWE-248
 Uncaught Exception
CVE-2025-15649 2026-05-30 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1833 7.1 HIGH
Network
- - LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_promp… CWE-502
 Deserialization of Untrusted Data
CVE-2026-45134 2026-05-30 01:12 2026-05-28 Show GitHub Exploit DB Packet Storm
1834 5.4 MEDIUM
Network
- - AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute endpoint executes block… CWE-770
CWE-841
 Allocation of Resources Without Limits or Throttling
 Improper Enforcement of Behavioral Workflow
CVE-2026-45023 2026-05-30 01:07 2026-05-29 Show GitHub Exploit DB Packet Storm
1835 7.5 HIGH
Network
google chrome Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox vi… CWE-457
 Use of Uninitialized Variable
CVE-2026-9963 2026-05-30 01:06 2026-05-29 Show GitHub Exploit DB Packet Storm
1836 7.5 HIGH
Network
dell unisphere_for_powermax_virtual_appliance Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the  Unisphere for VMAX application running in vApp CWE-285
Improper Authorization
CVE-2022-34363 2026-05-30 00:53 2026-05-23 Show GitHub Exploit DB Packet Storm
1837 6.5 MEDIUM
Network
golang net Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CWE-400
 Uncontrolled Resource Consumption
CVE-2026-25680 2026-05-30 00:47 2026-05-23 Show GitHub Exploit DB Packet Storm
1838 6.5 MEDIUM
Network
- - The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates are valid when sendi… CWE-295
Improper Certificate Validation 
CVE-2026-44213 2026-05-30 00:42 2026-05-27 Show GitHub Exploit DB Packet Storm
1839 7.1 HIGH
Network
- - Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token… CWE-863
 Incorrect Authorization
CVE-2026-42280 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
1840 7.5 HIGH
Network
- - opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics en… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2026-44902 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm