Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222671 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0371 2014-01-16 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
222672 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Lifecycle Management for Process における Manage Data Cache に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5897 2014-01-16 17:45 2014-01-14 Show GitHub Exploit DB Packet Storm
222673 4 警告 Apache Software Foundation - Apache CloudStack におけるネットワーク ACL を一覧表示される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0031 2014-01-16 17:19 2014-01-10 Show GitHub Exploit DB Packet Storm
222674 6.9 警告 クアルコム
Android for MSM
- MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-6123 2014-01-16 16:48 2013-10-11 Show GitHub Exploit DB Packet Storm
222675 4 警告 シスコシステムズ - Cisco Identity Services Engine Software の RBAC の実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0665 2014-01-16 16:40 2014-01-15 Show GitHub Exploit DB Packet Storm
222676 6.8 警告 The Icinga Project - Icinga の cmd.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-7107 2014-01-16 16:39 2013-12-23 Show GitHub Exploit DB Packet Storm
222677 6.5 警告 The Icinga Project - Icinga におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-7106 2014-01-16 16:37 2013-12-17 Show GitHub Exploit DB Packet Storm
222678 7.1 危険 ジュニパーネットワークス - Juniper Networks SRX シリーズサービスゲートウェイ上で稼働する Juniper Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-0617 2014-01-16 16:06 2014-01-8 Show GitHub Exploit DB Packet Storm
222679 7.1 危険 ジュニパーネットワークス - Juniper Junos の XNM コマンドプロセッサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-0613 2014-01-16 16:05 2014-01-9 Show GitHub Exploit DB Packet Storm
222680 6.3 警告 オラクル - Oracle Fusion Middleware の Oracle Internet Directory における OID LDAP サーバに関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0400 2014-01-16 15:34 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1901 7.4 HIGH
Network
pyjwt_project pyjwt PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate… CWE-287
CWE-347
Improper Authentication
 Improper Verification of Cryptographic Signature
CVE-2026-48526 2026-06-2 02:45 2026-05-29 Show GitHub Exploit DB Packet Storm
1902 5.3 MEDIUM
Network
pyjwt_project pyjwt PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying detached JWS tokens using the unencoded-payload option ("b64": false, RFC 7797), PyJWT performs Base64URL deco… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-48525 2026-06-2 02:45 2026-05-29 Show GitHub Exploit DB Packet Storm
1903 3.7 LOW
Network
pyjwt_project pyjwt PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signing_key() forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no ra… CWE-460
CWE-755
 Improper Cleanup on Thrown Exception
 Improper Handling of Exceptional Conditions
CVE-2026-48524 2026-06-2 02:44 2026-05-29 Show GitHub Exploit DB Packet Storm
1904 5.4 MEDIUM
Network
pyjwt_project pyjwt PyJWT is a JSON Web Token implementation in Python. From 2.9.0 to 2.12.1, there is a verifier-side algorithm allow-list bypass when jwt.decode() or jwt.decode_complete() are called with a PyJWK key. … CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-48523 2026-06-2 02:44 2026-05-29 Show GitHub Exploit DB Packet Storm
1905 8.8 HIGH
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs.… CWE-122
Heap-based Buffer Overflow
CVE-2026-44421 2026-06-2 02:35 2026-05-30 Show GitHub Exploit DB Packet Storm
1906 5.4 MEDIUM
Network
ibm webmethods_integration_server IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). Th… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2025-14290 2026-06-2 02:33 2026-05-27 Show GitHub Exploit DB Packet Storm
1907 7.6 HIGH
Network
ibm cognos_analytics
cognos_transformer
IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows… CWE-79
Cross-site Scripting
CVE-2025-36126 2026-06-2 02:30 2026-05-27 Show GitHub Exploit DB Packet Storm
1908 7.4 HIGH
Network
miniorange saml_sso_-_service_provider Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0 befor… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-5343 2026-06-2 02:29 2026-05-29 Show GitHub Exploit DB Packet Storm
1909 8.8 HIGH
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without track… CWE-415
CWE-416
 Double Free
 Use After Free
CVE-2026-44422 2026-06-2 02:26 2026-05-30 Show GitHub Exploit DB Packet Storm
1910 5.3 MEDIUM
Network
ibm watsonx.data IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. CWE-923
NVD-CWE-noinfo
 Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-36145 2026-06-2 02:24 2026-05-27 Show GitHub Exploit DB Packet Storm