Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226891 4.3 警告 たっちゃんのHP - 改造版 TOWN におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4716 2013-11-11 16:33 2013-11-7 Show GitHub Exploit DB Packet Storm
226892 5.8 警告 IBM - IBM Tivoli Federated Identity Manager および Tivoli Federated Identity Manager Business Gateway におけるユーザを任意の Web サイトにリダイレクトされる脆弱性 CWE-20
CWE-Other
CVE-2013-5431 2013-11-11 16:33 2013-10-28 Show GitHub Exploit DB Packet Storm
226893 5 警告 シスコシステムズ - Cisco MDS 9000 デバイス上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-5566 2013-11-11 16:14 2013-11-6 Show GitHub Exploit DB Packet Storm
226894 4.3 警告 シスコシステムズ - Cisco IOS XR の OSPFv3 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-5565 2013-11-11 16:13 2013-11-7 Show GitHub Exploit DB Packet Storm
226895 10 危険 シスコシステムズ - Cisco TelePresence VX Clinical Assistant の WIL-A モジュールにおけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-5558 2013-11-11 16:13 2013-11-6 Show GitHub Exploit DB Packet Storm
226896 7.5 危険 シスコシステムズ - Cisco Wide Area Application Services Mobile のサーバの Web 管理インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-5554 2013-11-11 16:12 2013-11-6 Show GitHub Exploit DB Packet Storm
226897 7.8 危険 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-5553 2013-11-11 15:04 2013-11-6 Show GitHub Exploit DB Packet Storm
226898 4.3 警告 アップル - Apple iOS などで使用される WebKit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5131 2013-11-11 14:14 2013-09-18 Show GitHub Exploit DB Packet Storm
226899 4.3 警告 アップル - Apple iOS などで使用される WebKit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5129 2013-11-11 14:13 2013-09-18 Show GitHub Exploit DB Packet Storm
226900 8.5 危険 PineApp - PineApp Mail-SeCure における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4987 2013-11-11 11:33 2013-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
861 - - - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-extension:// origins, granting RoleAdministrator acce… New CWE-346
 Origin Validation Error
CVE-2026-54069 2026-06-26 00:16 2026-06-25 Show GitHub Exploit DB Packet Storm
862 7.4 HIGH
Network
- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrime(candidate[, options][, callback]) and crypto.checkPrimeSync(candidate[, options]) ran no Miller-Rabin… New CWE-325
 Missing Required Cryptographic Step
CVE-2026-49440 2026-06-26 00:16 2026-06-24 Show GitHub Exploit DB Packet Storm
863 - - - Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys New CWE-339
 Small Seed Space in PRNG
CVE-2026-2815 2026-06-26 00:16 2026-06-25 Show GitHub Exploit DB Packet Storm
864 7.5 HIGH
Network
- - An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New CWE-89
SQL Injection
CVE-2025-61028 2026-06-26 00:16 2026-06-24 Show GitHub Exploit DB Packet Storm
865 8.8 HIGH
Network
google chrome Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: High) New CWE-416
 Use After Free
CVE-2026-13035 2026-06-26 00:14 2026-06-25 Show GitHub Exploit DB Packet Storm
866 8.8 HIGH
Network
google chrome Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New CWE-416
 Use After Free
CVE-2026-13036 2026-06-26 00:13 2026-06-25 Show GitHub Exploit DB Packet Storm
867 7.8 HIGH
Local
google chrome Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity:… New CWE-416
 Use After Free
CVE-2026-13037 2026-06-26 00:13 2026-06-25 Show GitHub Exploit DB Packet Storm
868 8.8 HIGH
Network
google chrome Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) New CWE-416
 Use After Free
CVE-2026-13038 2026-06-26 00:12 2026-06-25 Show GitHub Exploit DB Packet Storm
869 8.8 HIGH
Network
cacti cacti Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph_name_regexp in the Reports feature. This issue ha… New CWE-89
SQL Injection
CVE-2026-39951 2026-06-26 00:09 2026-06-25 Show GitHub Exploit DB Packet Storm
870 6.1 MEDIUM
Network
cacti cacti Cacti is an open source performance and fault management framework. Versions 1.2.30 and below contain a Reflected XSS vulnerability in the html_auth_footer. This issue has been fixed in version 1.2.3… New CWE-79
Cross-site Scripting
CVE-2026-39897 2026-06-26 00:04 2026-06-25 Show GitHub Exploit DB Packet Storm