Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224971 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Install / Installation に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5826 2013-11-25 15:34 2013-10-15 Show GitHub Exploit DB Packet Storm
224972 7.8 危険 ISC, Inc.
アップル
- UNIX プラットフォーム上の ISC BIND におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-119
バッファエラー
CVE-2013-2266 2013-11-25 10:53 2013-03-26 Show GitHub Exploit DB Packet Storm
224973 4.6 警告 The phpMyAdmin Project - phpMyAdmin における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-3239 2013-11-25 10:52 2013-04-24 Show GitHub Exploit DB Packet Storm
224974 6 警告 The phpMyAdmin Project - phpMyAdmin における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-3238 2013-11-25 10:51 2013-04-24 Show GitHub Exploit DB Packet Storm
224975 4.9 警告 FreeBSD - FreeBSD の sys/dev/qlxgbe/ql_ioctl.c 内の ql_eioctl 関数における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-6834 2013-11-22 15:13 2013-11-15 Show GitHub Exploit DB Packet Storm
224976 4.9 警告 FreeBSD - FreeBSD の sys/dev/qlxge/qls_ioctl.c 内の qls_eioctl 関数における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-6833 2013-11-22 15:12 2013-11-15 Show GitHub Exploit DB Packet Storm
224977 4.9 警告 FreeBSD - FreeBSD の NAND ドライバの sys/dev/nand/nand_geom.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-6832 2013-11-22 15:11 2013-11-15 Show GitHub Exploit DB Packet Storm
224978 6.8 警告 フォーティネット - Fortinet FortiAnalyzer におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6826 2013-11-22 10:32 2013-11-12 Show GitHub Exploit DB Packet Storm
224979 9.3 危険 マイクロソフト - Microsoft Office 2003 および 2007 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-0082 2013-11-22 10:14 2013-11-12 Show GitHub Exploit DB Packet Storm
224980 9.3 危険 マイクロソフト - Microsoft Office 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1324 2013-11-22 10:14 2013-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3511 8.8 HIGH
Network
sangoma freepbx FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without path sanitization. The $_REQUEST[… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-44239 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3512 9.8 CRITICAL
Network
- - Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search APIs interpolated the user-supplied regConfig parameter directly into the generate… CWE-89
SQL Injection
CVE-2026-45288 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3513 7.3 HIGH
Network
- - Better Auth is an authentication and authorization library for TypeScript. Prior to 1.4.17 and 1.5.0-beta.9, Better Auth's HTTP rate limiter keyed each request by the exact textual IP address it rece… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-45364 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3514 4.7 MEDIUM
Network
- - typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary inconsistency bet… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45366 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3515 8.8 HIGH
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a classic shell-metacharacter injection. The YPTSocket notification branch in plugin/Live/on_publish.php builds an execAsyn… CWE-78
OS Command 
CVE-2026-45578 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3516 5.4 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a stored cross-site scripting vulnerability. The Live plugin's "YouTube-style" view renders the live transmission's stream … CWE-79
Cross-site Scripting
CVE-2026-45580 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3517 6.5 MEDIUM
Network
n8n-mcp n8n-mcp n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.51.3, the workflow telemetry sanitizer could retain partial fragments of … CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-45582 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3518 6.5 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a cross-site request forgery vulnerability on the 2FA toggle. plugin/LoginControl/set.json.php accepts POST type=set2FA val… CWE-306
CWE-352
Missing Authentication for Critical Function
 Origin Validation Error
CVE-2026-45610 2026-06-2 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
3519 6.5 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, EpgParser.php, plugin/AI/receiveAsync.json.php, and other locations do not use the $resolvedIP out-param of isSSRFSafeURL() for DNS … CWE-367
CWE-918
 Time-of-check Time-of-use (TOCTOU) Race Condition
Server-Side Request Forgery (SSRF) 
CVE-2026-45619 2026-06-2 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
3520 5.3 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or admin gate. It only has an entry guard: preg_match('/^@/', $_REQUEST['term']) … CWE-204
CWE-285
 Response Discrepancy Information Exposure
Improper Authorization
CVE-2026-45620 2026-06-2 03:39 2026-05-29 Show GitHub Exploit DB Packet Storm