Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222701 5.8 警告 サイボウズ - サイボウズ ガルーンのケータイ機能における認証回避の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6006 2014-01-7 16:11 2013-12-25 Show GitHub Exploit DB Packet Storm
222702 6.4 警告 Bare Bones Software - 複数の Bare Bones Software 製品で使用されるソフトウェアアップデートメカニズムにおけるアップデートの "tampering or corruption" を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-3667 2014-01-7 15:45 2013-07-2 Show GitHub Exploit DB Packet Storm
222703 4.3 警告 Ubiquiti Networks - Ubiquiti Networks UniFi の UniFi Controller の管理者インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3572 2014-01-7 14:50 2013-10-22 Show GitHub Exploit DB Packet Storm
222704 10 危険 op5 - op5 Monitor および op5 Appliance における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0264 2014-01-7 14:33 2012-01-20 Show GitHub Exploit DB Packet Storm
222705 4 警告 op5 - op5 Monitor および op5 Appliance の monitor/index.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0263 2014-01-7 14:32 2012-01-20 Show GitHub Exploit DB Packet Storm
222706 10 危険 op5 - op5 Monitor および op5 Appliance の system-op5config の op5config/welcome における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0262 2014-01-7 14:28 2012-01-20 Show GitHub Exploit DB Packet Storm
222707 10 危険 op5 - op5 Monitor および op5 Appliance の system-portal の license.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0261 2014-01-7 14:27 2012-01-20 Show GitHub Exploit DB Packet Storm
222708 7.5 危険 Synology Inc. - Synology DiskStation Manager の FileBrowser コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-6987 2014-01-7 12:07 2013-12-19 Show GitHub Exploit DB Packet Storm
222709 4.3 警告 Mislav Marohnic - Ruby 用 will_paginate gem におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6459 2014-01-7 11:39 2013-09-18 Show GitHub Exploit DB Packet Storm
222710 4.3 警告 CloudBees - CloudBees Jenkins のデフォルトの markup formatter におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5573 2014-01-7 11:20 2013-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
971 7.1 HIGH
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through … New CWE-79
Cross-site Scripting
CVE-2026-42678 2026-06-2 02:57 2026-06-2 Show GitHub Exploit DB Packet Storm
972 6.5 MEDIUM
Network
- - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mamunur Rashid Classified Listing allows Path Traversal. This issue affects Classified Listing: from n… New CWE-22
Path Traversal
CVE-2026-42679 2026-06-2 02:57 2026-06-2 Show GitHub Exploit DB Packet Storm
973 6.5 MEDIUM
Network
rust-lang cargo Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary na… Update CWE-647
 Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-5222 2026-06-2 02:56 2026-05-25 Show GitHub Exploit DB Packet Storm
974 7.8 HIGH
Local
mediatek mt6739_firmware
mt6761_firmware
mt6765_firmware
mt6768_firmware
mt6781_firmware
mt6789_firmware
mt6835_firmware
mt6853_firmware
mt6855_firmware
mt6877_firmware
mt6878_fi…
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U… New CWE-787
 Out-of-bounds Write
CVE-2026-20455 2026-06-2 02:56 2026-06-1 Show GitHub Exploit DB Packet Storm
975 5.5 MEDIUM
Local
mediatek mt7902_firmware
mt7920_firmware
mt7921_firmware
mt7922_firmware
mt7925_firmware
mt7927_firmware
In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed fo… New CWE-787
 Out-of-bounds Write
CVE-2026-20456 2026-06-2 02:54 2026-06-1 Show GitHub Exploit DB Packet Storm
976 9.8 CRITICAL
Network
redhat
samba
openshift_container_platform
samba
enterprise_linux
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution charac… Update CWE-78
OS Command 
CVE-2026-4480 2026-06-2 02:53 2026-05-27 Show GitHub Exploit DB Packet Storm
977 5.3 MEDIUM
Network
rust-lang cargo Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The… Update CWE-61
 UNIX Symbolic Link (Symlink) Following
CVE-2026-5223 2026-06-2 02:52 2026-05-25 Show GitHub Exploit DB Packet Storm
978 7.4 HIGH
Network
pyjwt_project pyjwt PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate… Update CWE-287
CWE-347
Improper Authentication
 Improper Verification of Cryptographic Signature
CVE-2026-48526 2026-06-2 02:45 2026-05-29 Show GitHub Exploit DB Packet Storm
979 5.3 MEDIUM
Network
pyjwt_project pyjwt PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying detached JWS tokens using the unencoded-payload option ("b64": false, RFC 7797), PyJWT performs Base64URL deco… Update CWE-400
 Uncontrolled Resource Consumption
CVE-2026-48525 2026-06-2 02:45 2026-05-29 Show GitHub Exploit DB Packet Storm
980 3.7 LOW
Network
pyjwt_project pyjwt PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signing_key() forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no ra… Update CWE-460
CWE-755
 Improper Cleanup on Thrown Exception
 Improper Handling of Exceptional Conditions
CVE-2026-48524 2026-06-2 02:44 2026-05-29 Show GitHub Exploit DB Packet Storm