Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222941 2.6 注意 GNU Project
Fedora Project		 - GNU C Library の pt_chown におけるファイルの権限を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2207 2013-12-26 17:42 2013-06-20 Show GitHub Exploit DB Packet Storm
222942 5.1 警告 GNU Project - GNU C Library および Embedded GLIBC の PTR_MANGLE の実装における実行フローを制御される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4788 2013-12-26 17:42 2013-07-15 Show GitHub Exploit DB Packet Storm
222943 5 警告 Mozilla Foundation - Bugzilla におけるプライベートプロダクト名を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-0786 2013-12-26 17:41 2013-02-17 Show GitHub Exploit DB Packet Storm
222944 4.3 警告 Mozilla Foundation - Bugzilla の show_bug.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0785 2013-12-26 17:41 2013-02-17 Show GitHub Exploit DB Packet Storm
222945 6.5 警告 OpenStack - 複数の OpenStack 製品におけるアクセスを保持される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-4222 2013-12-26 17:37 2013-06-3 Show GitHub Exploit DB Packet Storm
222946 4.7 警告 Linux - Linux Kernel の IPv6 の実装の net/ipv6/udp.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4162 2013-12-26 17:30 2013-07-2 Show GitHub Exploit DB Packet Storm
222947 7.2 危険 Novell - Windows 上で稼働する Novell Client の NICM.SYS カーネルドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3956 2013-12-26 16:57 2013-05-28 Show GitHub Exploit DB Packet Storm
222948 7.2 危険 Novell - Windows 上で稼働する Novell Client のカーネルドライバにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-3697 2013-12-26 16:54 2013-05-28 Show GitHub Exploit DB Packet Storm
222949 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3335 2013-12-26 16:07 2013-05-14 Show GitHub Exploit DB Packet Storm
222950 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3334 2013-12-26 16:05 2013-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.5 MEDIUM
Network 		- - The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This… New CWE-89
SQL Injection 		CVE-2026-5074 2026-06-3 05:56 2026-06-3 Show GitHub Exploit DB Packet Storm
622 9.8 CRITICAL
Network 		- - The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset k… New CWE-287
Improper Authentication 		CVE-2026-5076 2026-06-3 05:56 2026-06-3 Show GitHub Exploit DB Packet Storm
623 9.8 CRITICAL
Network 		synology beestation_os Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via … Update CWE-120
Classic Buffer Overflow 		CVE-2025-12686 2026-06-3 05:43 2026-05-27 Show GitHub Exploit DB Packet Storm
624 9.8 CRITICAL
Network 		synology diskstation_manager Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) allows remote atta… Update CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2025-13392 2026-06-3 05:42 2026-05-27 Show GitHub Exploit DB Packet Storm
625 7.5 HIGH
Network 		synology c2_identity_edge_server An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. Update CWE-749
 Exposed Dangerous Method or Function 		CVE-2025-14713 2026-06-3 05:41 2026-05-27 Show GitHub Exploit DB Packet Storm
626 8.6 HIGH
Network 		synology active_backup_for_business A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. Update CWE-89
SQL Injection 		CVE-2025-30028 2026-06-3 05:41 2026-05-27 Show GitHub Exploit DB Packet Storm
627 5.9 MEDIUM
Network 		synology safe_access Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authenticated users with admi… Update CWE-79
Cross-site Scripting 		CVE-2025-10466 2026-06-3 05:30 2026-05-27 Show GitHub Exploit DB Packet Storm
628 8.6 HIGH
Local 		zed zed Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allow… Update CWE-78
OS Command  		CVE-2026-44465 2026-06-3 05:17 2026-05-29 Show GitHub Exploit DB Packet Storm
629 - - - In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names e… Update CWE-863
 Incorrect Authorization 		CVE-2026-49299 2026-06-3 05:16 2026-05-29 Show GitHub Exploit DB Packet Storm
630 - - - In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty bu… Update CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-49017 2026-06-3 05:16 2026-05-27 Show GitHub Exploit DB Packet Storm