Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
246951	6.9	警告	crip	-	crip の editcomment における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5376	2012-06-26 16:03	2008-12-8	Show	GitHub Exploit DB Packet Storm

246952	6.9	警告	cmus	-	cmus の cmus-status-display における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5375	2012-06-26 16:03	2008-12-8	Show	GitHub Exploit DB Packet Storm

246953	7.5	危険	Activewebsoftwares	-	ActiveWebSoftwares ActiveVotes の VoteHistory.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5365	2012-06-26 16:03	2008-12-8	Show	GitHub Exploit DB Packet Storm

246954	7.5	危険	bdigital web solutions	-	WebStudio CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5336	2012-06-26 16:03	2008-12-4	Show	GitHub Exploit DB Packet Storm

246955	4.3	警告	easy-script	-	Wysi Wiki Wyg の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5323	2012-06-26 16:03	2008-12-3	Show	GitHub Exploit DB Packet Storm

246956	7.8	危険	easy-script	-	Wysi Wiki Wyg におけるシステム情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-5322	2012-06-26 16:03	2008-12-3	Show	GitHub Exploit DB Packet Storm

246957	6.5	警告	e107.org	-	e107 の usersettings.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5320	2012-06-26 16:03	2008-12-3	Show	GitHub Exploit DB Packet Storm

246958	7.8	危険	アップルマイクロソフト	-	Apple iPhone Configuration Web Utility の Web インターフェースにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5315	2012-06-26 16:03	2008-12-3	Show	GitHub Exploit DB Packet Storm

246959	6.8	警告	Bharat Mediratta	-	Gallery における管理者権限を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-5296	2012-06-26 16:03	2008-11-21	Show	GitHub Exploit DB Packet Storm

246960	7.5	危険	bdigital web solutions	-	WebStudio eCatalogue の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5294	2012-06-26 16:03	2008-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3171	7.7	HIGH Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-46447	2026-06-5 03:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

3172	4.9	MEDIUM Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-44917	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

3173	8.1	HIGH Network	openstack	ironic	OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.	CWE-23 Relative Path Traversal	CVE-2026-48681	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

3174	5.9	MEDIUM Local	libexpat_project	libexpat	libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.…	CWE-416 Use After Free	CVE-2026-50219	2026-06-5 03:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

3175	7.5	HIGH Network	solarwinds	web_help_desk	SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-28299	2026-06-5 03:39	2026-06-3	Show	GitHub Exploit DB Packet Storm

3176	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain…	CWE-209 Information Exposure Through an Error Message	CVE-2025-52606	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

3177	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path…	CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute	CVE-2025-52608	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

3178	4.3	MEDIUM Network	mozilla	firefox	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.	CWE-843 Type Confusion	CVE-2026-10702	2026-06-5 03:38	2026-06-3	Show	GitHub Exploit DB Packet Storm

3179	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-125 Out-of-bounds Read	CVE-2026-46344	2026-06-5 03:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

3180	5.3	MEDIUM Network	openquantumsafe	liboqs	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT …	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2026-44518	2026-06-5 03:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed