Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
246701 9.3 危険 chilkat software - Chilkat Crypt ActiveX コンポーネントの ChilkatCrypt2.dll における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認
CVE-2008-5002 2012-06-26 16:03 2008-11-10 Show GitHub Exploit DB Packet Storm
246702 6.9 警告 georges khaznadar - wims における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4986 2012-06-26 16:03 2008-08-24 Show GitHub Exploit DB Packet Storm
246703 6.9 警告 tvdr - Video Disk Recorder の vdrleaktest における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4985 2012-06-26 16:03 2008-11-6 Show GitHub Exploit DB Packet Storm
246704 6.9 警告 freedesktop.org - scratchbox2 における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4984 2012-06-26 16:03 2008-11-6 Show GitHub Exploit DB Packet Storm
246705 6.9 警告 alan woodland - ogle における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4976 2012-06-26 16:03 2008-11-6 Show GitHub Exploit DB Packet Storm
246706 6.9 警告 align.bmr.kyushu-u.ac - mafft の mafft-homologs における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4971 2012-06-26 16:03 2008-11-6 Show GitHub Exploit DB Packet Storm
246707 6.9 警告 alastair mckinstry - ltp-network-test における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4969 2012-06-26 16:03 2008-11-6 Show GitHub Exploit DB Packet Storm
246708 6.9 警告 bitmover - lmbench の rccs スクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4968 2012-06-26 16:03 2008-11-6 Show GitHub Exploit DB Packet Storm
246709 6.9 警告 dov grobgeld - impose+ の impose における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4960 2012-06-26 16:03 2008-11-5 Show GitHub Exploit DB Packet Storm
246710 6.9 警告 gpsdrive - gpsdrive-scripts の geo-code における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4959 2012-06-26 16:03 2008-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2291 8.8 HIGH
Network
- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUpdate` as a state-changing administrator endpoint, but the route does not enforc… CWE-352
 Origin Validation Error
CVE-2026-43985 2026-06-5 01:20 2026-06-5 Show GitHub Exploit DB Packet Storm
2292 6.1 MEDIUM
Network
- - Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE_SCHEMA, Memo Rendering Component, and Public/Private Memo View … CWE-79
Cross-site Scripting
CVE-2026-30586 2026-06-5 01:18 2026-06-3 Show GitHub Exploit DB Packet Storm
2293 5.0 MEDIUM
Local
- - A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS)… CWE-476
 NULL Pointer Dereference
CVE-2025-60477 2026-06-5 01:18 2026-06-3 Show GitHub Exploit DB Packet Storm
2294 - - - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Versions prior to 5.0.13, 4.1.… CWE-79
Cross-site Scripting
CVE-2022-31114 2026-06-5 01:18 2026-06-4 Show GitHub Exploit DB Packet Storm
2295 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable to remote code execution via the newsletter custom template directory feature. O… CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-41065 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2296 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vulnerability in the cache deletion endpoint allows authenticated API access t… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-40605 2026-06-5 01:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2297 4.6 MEDIUM
Physics
- - The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive u… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-36178 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2298 6.5 MEDIUM
Network
- - (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the sa… - CVE-2026-27145 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
2299 7.5 HIGH
Network
- - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-42504 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
2300 5.3 MEDIUM
Network
- - When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or log… - CVE-2026-42507 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm