Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225361 6.2 警告 シスコシステムズ - Cisco NX-OS の CLI パーサにおけるディレクトリトラバーサルの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4141 2013-10-8 16:59 2013-10-4 Show GitHub Exploit DB Packet Storm
225362 6.2 警告 シスコシステムズ - Cisco NX-OS の CLI パーサにおけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4122 2013-10-8 16:55 2013-10-4 Show GitHub Exploit DB Packet Storm
225363 5 警告 シスコシステムズ - Cisco NX-OS の BGP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4098 2013-10-8 16:48 2013-10-4 Show GitHub Exploit DB Packet Storm
225364 5 警告 シスコシステムズ - Cisco NX-OS の RIP サービスエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4091 2013-10-8 16:41 2013-10-7 Show GitHub Exploit DB Packet Storm
225365 4 警告 シスコシステムズ - Nexus 7000 デバイス上で稼働する Cisco NX-OS における重要な設定ファイルの情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4090 2013-10-8 16:35 2013-10-7 Show GitHub Exploit DB Packet Storm
225366 7.2 危険 シスコシステムズ - Cisco NX-OS における権限を取得される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2012-4075 2013-10-8 16:26 2013-10-4 Show GitHub Exploit DB Packet Storm
225367 6.8 警告 シスコシステムズ - Cisco Unified Computing System におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4084 2013-10-8 16:21 2013-10-4 Show GitHub Exploit DB Packet Storm
225368 6.5 警告 Vtiger - vTiger CRM の CalendarCommon.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5091 2013-10-8 16:09 2013-09-17 Show GitHub Exploit DB Packet Storm
225369 1.5 注意 ヒューレット・パッカード - 複数の HP 製品の FutureSmart デバイスにおける任意のスキャンされたドキュメントの画像を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-4829 2013-10-8 15:59 2013-10-3 Show GitHub Exploit DB Packet Storm
225370 4.3 警告 ヒューレット・パッカード - 複数の HP 製品の FutureSmart デバイスにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-4828 2013-10-8 15:59 2013-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 8.1 HIGH
Network 		- - Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may… New CWE-787
 Out-of-bounds Write 		CVE-2026-7383 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
62 9.8 CRITICAL
Network 		- - YesWiki is a wiki system written in PHP. Prior to version 4.6.6, an unsafe execution vulnerability exists in the Bazar form field calculator (CalcField.php) of YesWiki. The application attempts to sa… New CWE-94
CWE-1333
Code Injection
 Inefficient Regular Expression Complexity 		CVE-2026-52778 2026-06-10 02:17 2026-06-9 Show GitHub Exploit DB Packet Storm
63 6.5 MEDIUM
Network 		- - Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. New CWE-200
Information Exposure 		CVE-2026-50508 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
64 6.8 MEDIUM
Physics 		- - Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. New CWE-306
Missing Authentication for Critical Function 		CVE-2026-50507 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
65 7.5 HIGH
Network 		- - Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 … New CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-49975 2026-06-10 02:17 2026-06-9 Show GitHub Exploit DB Packet Storm
66 8.8 HIGH
Network 		- - Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executable Git configuration… New CWE-78
OS Command  		CVE-2026-49959 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
67 5.0 MEDIUM
Local 		- - Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows attackers to delete… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-49958 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
68 7.7 HIGH
Network 		- - Hermes WebUI before version 0.51.269 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the… New CWE-22
Path Traversal 		CVE-2026-49957 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
69 5.3 MEDIUM
Network 		- - Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly calling the passkey option… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-49955 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
70 4.3 MEDIUM
Network 		- - FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version… New CWE-287
Improper Authentication 		CVE-2026-49848 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm