Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228821 2.6 注意 グリー株式会社 - Android 版 GREE (グリー) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-0704 2013-02-14 12:01 2013-02-14 Show GitHub Exploit DB Packet Storm
228822 4.3 警告 imgboard.com CGIダウンロードセンター - imgboard におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0703 2013-02-14 12:00 2013-02-14 Show GitHub Exploit DB Packet Storm
228823 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-0653 2013-02-13 16:45 2013-01-22 Show GitHub Exploit DB Packet Storm
228824 9.3 危険 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0654 2013-02-13 16:44 2013-01-22 Show GitHub Exploit DB Packet Storm
228825 6.8 警告 アクセラテクノロジ - Accela BizSearch におけるユーザになりすまされる脆弱性 CWE-noinfo
情報不足
- 2013-02-13 15:44 2013-02-5 Show GitHub Exploit DB Packet Storm
228826 7.2 危険 VMware - 複数の VMware 製品の VMCI の実装における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1406 2013-02-13 15:42 2013-02-7 Show GitHub Exploit DB Packet Storm
228827 7.5 危険 CubeCart Limited - CubeCart における任意の PHP オブジェクトをアンシリアライズされる脆弱性 CWE-20
不適切な入力確認
CVE-2013-1465 2013-02-13 11:53 2013-01-31 Show GitHub Exploit DB Packet Storm
228828 - - ARM Ltd. (旧 Offspark) - ** 削除 ** PolarSSL の SSL モジュールにおける識別攻撃を誘発される脆弱性 - CVE-2013-1622 2013-02-13 11:49 2013-02-2 Show GitHub Exploit DB Packet Storm
228829 6.8 警告 Opera Software ASA - Opera における CSRF 保護メカニズムを回避される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-1639 2013-02-12 16:51 2013-01-30 Show GitHub Exploit DB Packet Storm
228830 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-1638 2013-02-12 16:49 2013-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2361 4.1 MEDIUM
Network
synology hyper_backup An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote authenti… CWE-22
Path Traversal
CVE-2024-47263 2026-06-6 03:31 2026-06-3 Show GitHub Exploit DB Packet Storm
2362 5.9 MEDIUM
Network
synology note_station_client A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2023-52951 2026-06-6 03:20 2026-06-3 Show GitHub Exploit DB Packet Storm
2363 7.8 HIGH
Local
synology hyper_backup_explorer An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute arbitrary code via u… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-49042 2026-06-6 03:19 2026-06-3 Show GitHub Exploit DB Packet Storm
2364 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-6209 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
2365 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-6208 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
2366 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-6207 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
2367 8.2 HIGH
Network
- - TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Version 2.5.0 fixes the … CWE-306
Missing Authentication for Critical Function
CVE-2026-45327 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
2368 7.5 HIGH
Network
- - Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.0.0.CR3-20260418.124334-32` impacts publicly accessible software depending on t… CWE-20
 Improper Input Validation 
CVE-2026-45291 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
2369 7.5 HIGH
Network
- - Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.0.0.CR3-20260417.085727-30` impacts publicly accessible software depending on t… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-45290 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
2370 5.3 MEDIUM
Network
- - transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths. CWE-113
HTTP Response Splitting
CVE-2026-38978 2026-06-6 03:17 2026-06-3 Show GitHub Exploit DB Packet Storm