Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224251 5.5 警告 IBM - IBM Security AppScan Enterprise の Jazz Team Server コンポーネントにおける不特定のアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-5430 2013-10-29 16:57 2013-10-22 Show GitHub Exploit DB Packet Storm
224252 3.5 注意 IBM - IBM Security AppScan Enterprise における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-3989 2013-10-29 16:49 2013-10-22 Show GitHub Exploit DB Packet Storm
224253 6.8 警告 IBM - IBM Flex System Manager におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5424 2013-10-29 16:37 2013-10-22 Show GitHub Exploit DB Packet Storm
224254 7.5 危険 Igor Sysoev - nginx のデフォルト設定における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0337 2013-10-29 15:52 2013-10-6 Show GitHub Exploit DB Packet Storm
224255 6.8 警告 ARM Ltd. (旧 Offspark) - PolarSSL の ssl_tls.c の ssl_read_record 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-5914 2013-10-29 15:47 2013-10-1 Show GitHub Exploit DB Packet Storm
224256 4.3 警告 Dwayne C. Litzenberger - PyCrypto の Crypto.Random.atfork 関数における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-1445 2013-10-29 15:29 2013-10-14 Show GitHub Exploit DB Packet Storm
224257 7.5 危険 VideoLAN - VideoLAN VLC media player におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6283 2013-10-29 15:23 2013-10-25 Show GitHub Exploit DB Packet Storm
224258 4.9 警告 Canonical - Apport における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1067 2013-10-29 15:19 2013-10-24 Show GitHub Exploit DB Packet Storm
224259 5.8 警告 WellinTech - WellinTech KingView の KChartXY.ocx における任意のファイルを生成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6128 2013-10-29 11:39 2013-10-22 Show GitHub Exploit DB Packet Storm
224260 5.8 警告 WellinTech - WellinTech KingView の SuperGrid.ocx における任意のファイルを生成される脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-6127 2013-10-29 11:34 2013-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 - - - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Versions prior to 5.0.13, 4.1.… New CWE-79
Cross-site Scripting 		CVE-2022-31114 2026-06-5 01:18 2026-06-4 Show GitHub Exploit DB Packet Storm
122 - - - A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL. New - CVE-2026-36574 2026-06-5 01:18 2026-06-4 Show GitHub Exploit DB Packet Storm
123 - - - Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UP… New - CVE-2026-37460 2026-06-5 01:17 2026-06-3 Show GitHub Exploit DB Packet Storm
124 7.1 HIGH
Adjacent 		- - Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension … New CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-8874 2026-06-5 01:16 2026-06-4 Show GitHub Exploit DB Packet Storm
125 5.3 MEDIUM
Network 		- - Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative/amplification effe… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-47707 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
126 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable to remote code execution via the newsletter custom template directory feature. O… New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-41065 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
127 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vulnerability in the cache deletion endpoint allows authenticated API access t… New CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-40605 2026-06-5 01:16 2026-06-4 Show GitHub Exploit DB Packet Storm
128 4.6 MEDIUM
Physics 		- - The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive u… New CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2026-36178 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
129 6.5 MEDIUM
Network 		- - (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the sa… New - CVE-2026-27145 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
130 7.5 HIGH
Network 		- - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. New CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-42504 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm