Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222931 5.1 警告 DuckCorp Projects
Fedora Project		 - Bip における他のソケットに書き込まれる脆弱性 CWE-310
暗号の問題 		CVE-2013-4550 2013-12-27 10:52 2013-11-8 Show GitHub Exploit DB Packet Storm
222932 2.1 注意 レッドハット - Red Hat JBoss Operations Network における認証資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4452 2013-12-27 10:09 2013-11-25 Show GitHub Exploit DB Packet Storm
222933 7.5 危険 INNER ESTEEM SDN BHD - Classifieds Creator における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7216 2013-12-27 10:08 2013-12-14 Show GitHub Exploit DB Packet Storm
222934 5.4 警告 シスコシステムズ - Cisco IOS XE の Cisco Express Forwarding 処理モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6706 2013-12-26 18:37 2013-11-27 Show GitHub Exploit DB Packet Storm
222935 5 警告 MediaWiki - MediaWiki の includes/api/ 配下の複数の PHP ファイルにおける CSRF トークンを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4302 2013-12-26 18:17 2013-09-3 Show GitHub Exploit DB Packet Storm
222936 4.3 警告 Jean-Paul Calderone
Canonical		 - pyOpenSSL の X509Extension における任意の SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4314 2013-12-26 18:05 2013-09-4 Show GitHub Exploit DB Packet Storm
222937 10 危険 Super Micro Computer - 複数の Supermicro デバイス製品の IPMI におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3609 2013-12-26 18:04 2013-08-30 Show GitHub Exploit DB Packet Storm
222938 10 危険 Super Micro Computer - 複数の Supermicro デバイス製品の IPMI における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3608 2013-12-26 18:03 2013-08-30 Show GitHub Exploit DB Packet Storm
222939 10 危険 Super Micro Computer - 複数の Supermicro デバイス製品の IPMI におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-3607 2013-12-26 18:03 2013-08-30 Show GitHub Exploit DB Packet Storm
222940 7.2 危険 polkit project
Novell
Canonical
レッドハット		 - PolicyKit における PolicyKit 制限を回避される脆弱性 CWE-362
競合状態 		CVE-2013-4288 2013-12-26 17:51 2013-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 6.5 MEDIUM
Network 		nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to f… New CWE-285
Improper Authorization 		CVE-2026-45275 2026-06-4 02:39 2026-06-2 Show GitHub Exploit DB Packet Storm
1082 9.1 CRITICAL
Network 		oracle e-business_suite Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… Update CWE-284
Improper Access Control 		CVE-2026-46819 2026-06-4 02:37 2026-05-29 Show GitHub Exploit DB Packet Storm
1083 3.3 LOW
Local 		nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can req… New CWE-200
NVD-CWE-noinfo
Information Exposure 		CVE-2026-45277 2026-06-4 02:36 2026-06-2 Show GitHub Exploit DB Packet Storm
1084 6.1 MEDIUM
Network 		nextcloud user_oidc Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses … New CWE-601
Open Redirect 		CVE-2026-45278 2026-06-4 02:34 2026-06-2 Show GitHub Exploit DB Packet Storm
1085 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in Debug builds (SIGA… New CWE-476
 NULL Pointer Dereference 		CVE-2026-37226 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
1086 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer and enforces assert(rc < len) on the sctp_recvmsg() re… New CWE-617
 Reachable Assertion 		CVE-2026-37228 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
1087 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote unauthenticated attacker can send any non-PER byte sequence (e.g., a single 0x00 b… New CWE-617
 Reachable Assertion 		CVE-2026-37229 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
1088 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup returns NULL, triggering assert() in Debug builds (SIG… New CWE-476
 NULL Pointer Dereference 		CVE-2026-37230 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
1089 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, the 16-bit counter wraps around and produces duplicate… New CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-37231 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
1090 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0->xapp_id against itself (m… New CWE-617
 Reachable Assertion 		CVE-2026-37233 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm