Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2571	5.9	警告 Network	Synology Inc.	Note Station Client	Synology Inc.のNote Station Clientにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2023-52951	2026-06-8 12:28	2026-06-3	Show	GitHub Exploit DB Packet Storm

2572	4.1	警告 Network	Synology Inc.	Hyper Backup	Synology Inc.のHyper Backupにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-47263	2026-06-8 12:28	2026-06-3	Show	GitHub Exploit DB Packet Storm

2573	4.3	警告 Network	Synology Inc.	Hyper Backup	Synology Inc.のHyper Backupにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-47273	2026-06-8 12:28	2026-06-3	Show	GitHub Exploit DB Packet Storm

2574	5.5	警告 Local	Vivo	EasyShare	VivoのEasyShareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-15515	2026-06-8 12:28	2026-03-13	Show	GitHub Exploit DB Packet Storm

2575	8.6	重要 Network	Belden Inc.	HiOS Switch Software	Belden Inc.のHiOS Switch Softwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-15620	2026-06-8 12:28	2026-04-2	Show	GitHub Exploit DB Packet Storm

2576	4.9	警告 Network	Extreme Networks, Inc.	ExtremeCloud IQ Site Engine	Extreme Networks, Inc.のExtremeCloud IQ Site Engineにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-0689	2026-06-8 12:28	2026-03-2	Show	GitHub Exploit DB Packet Storm

2577	9.8	緊急 Network	Tesseract OCR project	Tesseract OCR	ZapolnochのTesseract OCRにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26832	2026-06-8 12:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

2578	9.1	緊急 Network	Bytedance Inc.	DeerFlow	Bytedance Inc.のDeerFlowにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40518	2026-06-8 12:28	2026-04-17	Show	GitHub Exploit DB Packet Storm

2579	5.3	警告 Network	The Netty project	netty-incubator-codec-ohttp	Nettyのnetty-incubator-codec-ohttpにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2026-41207	2026-06-8 12:28	2026-06-4	Show	GitHub Exploit DB Packet Storm

2580	9.8	緊急 Network	DragonSoft	Gcb/fcb Government Financial Cybersecurity Configuration Audit Software	DragonSoftのGcb/fcb Government Financial Cybersecurity Configuration Audit Softwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-4312	2026-06-8 12:28	2026-03-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305871	-	google acer samsung	chrome_os ac700_chromebook cr-48_chromebook series_5_chromebook	Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2011-4548	2024-11-21 10:32	2011-11-24	Show	GitHub Exploit DB Packet Storm

305872	-	reviewboard	review_board	Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vect…	CWE-79 Cross-site Scripting	CVE-2011-4312	2024-11-21 10:32	2011-11-24	Show	GitHub Exploit DB Packet Storm

305873	-	joomla	joomla\!	Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2011-4332	2024-11-21 10:32	2011-11-24	Show	GitHub Exploit DB Packet Storm

305874	-	joomla	joomla\!	The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vector…	CWE-310 Cryptographic Issues	CVE-2011-4321	2024-11-21 10:32	2011-11-24	Show	GitHub Exploit DB Packet Storm

305875	-	dlink	dir-685	The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote…	CWE-310 Cryptographic Issues	CVE-2011-4507	2024-11-21 10:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

305876	-	technicolor	tg585_router_firmware tg585_router	The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping actio…	CWE-16 Configuration	CVE-2011-4506	2024-11-21 10:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

305877	-	alcatel	speedtouch_5x6_router_firmware speedtouch_5x6_router	The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP reques…	CWE-16 Configuration	CVE-2011-4505	2024-11-21 10:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

305878	-	genmei_mori zyxel	pseudoics p-330w_router	The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request …	CWE-16 Configuration	CVE-2011-4504	2024-11-21 10:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

305879	-	broadcom sitecom	broadcom_linux wl-111	The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN i…	CWE-16 Configuration	CVE-2011-4503	2024-11-21 10:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

305880	-	edimax canyon-tech sitecom sweex	br-6104k_router_firmware br-6104k cn-wf512_router_firmware cn-wf514_router_firmware cn-wf512 cn-wf514 6114wg_router_firmware 6114wg wl-153_router_firmware wl-153 lb00002…	The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitec…	CWE-78 OS Command	CVE-2011-4502	2024-11-21 10:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed