Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223231	4.3	警告	シスコシステムズ	-	Cisco WebEx Meeting Center におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6960	2013-12-18 14:25	2013-12-13	Show	GitHub Exploit DB Packet Storm

223232	5.8	警告	シスコシステムズ	-	Cisco WebEx Sales Center におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2013-6959	2013-12-18 14:24	2013-12-13	Show	GitHub Exploit DB Packet Storm

223233	4.3	警告	シスコシステムズ	-	Cisco WebEx Sales Center の製品創出の管理ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6711	2013-12-18 14:23	2013-12-13	Show	GitHub Exploit DB Packet Storm

223234	6.8	警告	シスコシステムズ	-	Cisco WebEx Training Center におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-6710	2013-12-18 14:22	2013-12-13	Show	GitHub Exploit DB Packet Storm

223235	5	警告	シスコシステムズ	-	Cisco WebEx Training Center の登録コンポーネントにおけるアクセス制限を回避される脆弱性	CWE-200 情報漏えい	CVE-2013-6709	2013-12-18 14:21	2013-12-13	Show	GitHub Exploit DB Packet Storm

223236	10	危険	富士通	-	Interstage HTTP Server のログ機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-7105	2013-12-18 14:10	2013-11-26	Show	GitHub Exploit DB Packet Storm

223237	4.3	警告	NagiosQL	-	NagiosQL にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6039	2013-12-18 14:03	2013-12-5	Show	GitHub Exploit DB Packet Storm

223238	2.1	注意	Novell Percona	-	Percona XtraBackup における暗号保護メカニズムを破られる脆弱性	CWE-310 暗号の問題	CVE-2013-6394	2013-12-17 19:28	2013-11-25	Show	GitHub Exploit DB Packet Storm

223239	5.2	警告	Linux	-	Linux Kernel の KVM サブシステムの arch/x86/kvm/lapic.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2013-6376	2013-12-17 19:10	2013-12-12	Show	GitHub Exploit DB Packet Storm

223240	4.3	警告	xmlsoft.org	-	libxslt の xslt.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2013-4520	2013-12-17 19:03	2013-11-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
21	4.3	MEDIUM Network	mozilla	firefox	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. New	CWE-843 Type Confusion	CVE-2026-10702	2026-06-5 03:38	2026-06-3	Show	GitHub Exploit DB Packet Storm

22	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT … Update	CWE-125 Out-of-bounds Read	CVE-2026-46344	2026-06-5 03:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

23	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT … Update	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2026-44518	2026-06-5 03:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

24	5.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers. New	CWE-693 Protection Mechanism Failure	CVE-2025-52609	2026-06-5 03:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

25	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to an undefined property being accessed in the application's JavaScript code. Spec… New	CWE-209 Information Exposure Through an Error Message	CVE-2025-52611	2026-06-5 03:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

26	8.8	HIGH Network	hcltech	icontrol	HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input param… New	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2025-52612	2026-06-5 03:32	2026-06-4	Show	GitHub Exploit DB Packet Storm

27	5.4	MEDIUM Adjacent	macgregor	interschalt_vdr_g4e_firmware	Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks. Update	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2026-44611	2026-06-5 03:30	2026-05-30	Show	GitHub Exploit DB Packet Storm

28	5.4	MEDIUM Adjacent	macgregor	interschalt_vdr_g4e_firmware	An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes. Update	CWE-522 Insufficiently Protected Credentials	CVE-2026-42951	2026-06-5 03:30	2026-05-30	Show	GitHub Exploit DB Packet Storm

29	8.3	HIGH Adjacent	macgregor	interschalt_vdr_g4e_firmware	The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change. Update	CWE-1392 Use of Default Credentials	CVE-2026-42941	2026-06-5 03:27	2026-05-30	Show	GitHub Exploit DB Packet Storm

30	8.3	HIGH Adjacent	macgregor	interschalt_vdr_g4e_firmware	Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials. Update	CWE-798 Use of Hard-coded Credentials	CVE-2026-42929	2026-06-5 03:26	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed