Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
239911	7.5	危険	masir camp	-	Masir Camp E-Shop Module の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3955	2012-09-25 17:17	2008-09-10	Show	GitHub Exploit DB Packet Storm

239912	7.2	危険	ヒューレット・パッカード	-	OpenVMS Alpha の DCL における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2008-3947	2012-09-25 17:17	2008-09-5	Show	GitHub Exploit DB Packet Storm

239913	7.5	危険	ozsari	-	Full PHP Emlak Script の landsee.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3942	2012-09-25 17:17	2008-09-5	Show	GitHub Exploit DB Packet Storm

239914	4.4	警告	ヒューレット・パッカード	-	OpenVMS の HP TCP/IP Services の finger クライアントにおけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2008-3940	2012-09-25 17:17	2008-09-5	Show	GitHub Exploit DB Packet Storm

239915	5.8	警告	opendb	-	OpenDb の user_admin.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-3938	2012-09-25 17:17	2008-09-5	Show	GitHub Exploit DB Packet Storm

239916	4.3	警告	opendb	-	OpenDb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3937	2012-09-25 17:17	2008-09-5	Show	GitHub Exploit DB Packet Storm

239917	5.8	警告	hans oesterholt	-	CMME におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3926	2012-09-25 17:17	2008-09-4	Show	GitHub Exploit DB Packet Storm

239918	4.3	警告	hans oesterholt	-	CMME の admin.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-3925	2012-09-25 17:17	2008-09-4	Show	GitHub Exploit DB Packet Storm

239919	4.3	警告	hans oesterholt	-	CMME の "バックアップ作成" 機能におけるアカウント名を発見される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3924	2012-09-25 17:17	2008-09-4	Show	GitHub Exploit DB Packet Storm

239920	4.3	警告	hans oesterholt	-	CMME の statistics.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3923	2012-09-25 17:17	2008-09-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3171	7.7	HIGH Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-46447	2026-06-5 03:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

3172	4.9	MEDIUM Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-44917	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

3173	8.1	HIGH Network	openstack	ironic	OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.	CWE-23 Relative Path Traversal	CVE-2026-48681	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

3174	5.9	MEDIUM Local	libexpat_project	libexpat	libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.…	CWE-416 Use After Free	CVE-2026-50219	2026-06-5 03:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

3175	7.5	HIGH Network	solarwinds	web_help_desk	SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-28299	2026-06-5 03:39	2026-06-3	Show	GitHub Exploit DB Packet Storm

3176	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain…	CWE-209 Information Exposure Through an Error Message	CVE-2025-52606	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

3177	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path…	CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute	CVE-2025-52608	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

3178	4.3	MEDIUM Network	mozilla	firefox	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.	CWE-843 Type Confusion	CVE-2026-10702	2026-06-5 03:38	2026-06-3	Show	GitHub Exploit DB Packet Storm

3179	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-125 Out-of-bounds Read	CVE-2026-46344	2026-06-5 03:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

3180	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2026-44518	2026-06-5 03:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed