Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222681 9.3 危険 SolarWinds - DameWare Remote Support の DameWare Exporter ツールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-3249 2014-03-24 19:41 2013-07-25 Show GitHub Exploit DB Packet Storm
222682 4.3 警告 Combodo - iTop の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0805 2014-03-24 19:36 2013-01-23 Show GitHub Exploit DB Packet Storm
222683 2.6 注意 株式会社NTTドコモ - spモードメールにおける受信メールの添付ファイルへのアクセスに関する問題 CWE-264
認可・権限・アクセス制御 		CVE-2014-1977 2014-03-24 19:04 2014-03-18 Show GitHub Exploit DB Packet Storm
222684 4.3 警告 ES APP Group - ES File Explorer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1970 2014-03-24 18:49 2014-03-20 Show GitHub Exploit DB Packet Storm
222685 4.3 警告 Silex Labs - Silex におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1971 2014-03-24 18:25 2014-03-20 Show GitHub Exploit DB Packet Storm
222686 6.5 警告 IBM - IBM Rational ClearCase におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0829 2014-03-24 17:51 2014-03-19 Show GitHub Exploit DB Packet Storm
222687 3.5 注意 IBM - IBM QuickFile におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6729 2014-03-24 17:50 2013-11-8 Show GitHub Exploit DB Packet Storm
222688 5 警告 IBM - IBM WebSphere MQ Internet Pass-Thru におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-5401 2014-03-24 17:50 2013-08-22 Show GitHub Exploit DB Packet Storm
222689 6.5 警告 SIR - GNUboard の bbs/ajax.autosave.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2339 2014-03-24 17:41 2014-03-14 Show GitHub Exploit DB Packet Storm
222690 4.3 警告 Purple Beanie - Joomla! 用 PBBooking コンポーネントの manage.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5955 2014-03-24 17:41 2013-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2611 5.3 MEDIUM
Network 		djangoproject django An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip leading or trailing whitespace from `Vary` response header va… CWE-1023
 Incomplete Comparison with Missing Factors 		CVE-2026-48587 2026-06-5 22:03 2026-06-3 Show GitHub Exploit DB Packet Storm
2612 4.3 MEDIUM
Network 		djangoproject django An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.http.HttpRequest.get_signed_cookie` in Django uses a non-injective salt derivation (concatenating the cookie name and… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-6873 2026-06-5 21:58 2026-06-3 Show GitHub Exploit DB Packet Storm
2613 3.1 LOW
Network 		djangoproject django An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend` in Django fails to prevent reuse of a partially-initialized connection after a … CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-7666 2026-06-5 21:46 2026-06-3 Show GitHub Exploit DB Packet Storm
2614 5.3 MEDIUM
Network 		djangoproject django An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match `Cache-Control` response directives case-insensitive… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-8404 2026-06-5 21:38 2026-06-3 Show GitHub Exploit DB Packet Storm
2615 5.3 MEDIUM
Network 		exim exim Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client. CWE-839
 Numeric Range Comparison Without Minimum Check 		CVE-2026-48840 2026-06-5 20:16 2026-05-30 Show GitHub Exploit DB Packet Storm
2616 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid,… CWE-20
 Improper Input Validation  		CVE-2026-46243 2026-06-5 16:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2617 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_l… - CVE-2026-46242 2026-06-5 16:16 2026-05-30 Show GitHub Exploit DB Packet Storm
2618 3.3 LOW
Local 		- - HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized access and may lead to information exposure. - CVE-2025-62338 2026-06-5 14:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2619 4.1 MEDIUM
Network 		- - Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page CWE-79
Cross-site Scripting 		CVE-2026-37700 2026-06-5 11:17 2026-06-4 Show GitHub Exploit DB Packet Storm
2620 8.1 HIGH
Adjacent 		- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabl… CWE-306
Missing Authentication for Critical Function 		CVE-2026-36603 2026-06-5 11:17 2026-06-4 Show GitHub Exploit DB Packet Storm