Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2571 4.3 警告
Network 		Synology Inc. Hyper Backup Synology Inc.のHyper Backupにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-47273 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2572 5.5 警告
Local 		Vivo EasyShare VivoのEasyShareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-15515 2026-06-8 12:28 2026-03-13 Show GitHub Exploit DB Packet Storm
2573 8.6 重要
Network 		Belden Inc. HiOS Switch Software Belden Inc.のHiOS Switch Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-15620 2026-06-8 12:28 2026-04-2 Show GitHub Exploit DB Packet Storm
2574 4.9 警告
Network 		Extreme Networks, Inc. ExtremeCloud IQ Site Engine Extreme Networks, Inc.のExtremeCloud IQ Site Engineにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-0689 2026-06-8 12:28 2026-03-2 Show GitHub Exploit DB Packet Storm
2575 9.8 緊急
Network 		Tesseract OCR project Tesseract OCR ZapolnochのTesseract OCRにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-26832 2026-06-8 12:28 2026-03-25 Show GitHub Exploit DB Packet Storm
2576 9.1 緊急
Network 		Bytedance Inc. DeerFlow Bytedance Inc.のDeerFlowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40518 2026-06-8 12:28 2026-04-17 Show GitHub Exploit DB Packet Storm
2577 5.3 警告
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41207 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
2578 9.8 緊急
Network 		DragonSoft Gcb/fcb Government Financial Cybersecurity Configuration Audit Software DragonSoftのGcb/fcb Government Financial Cybersecurity Configuration Audit Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-4312 2026-06-8 12:28 2026-03-17 Show GitHub Exploit DB Packet Storm
2579 5.5 警告
Local 		Linaro OP-TEE Trusted FirmwareのOP-TEEにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-45702 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2580 9.1 緊急
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける複数の脆弱性 CWE-125
CWE-787
CVE-2026-48040 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305911 - google app_engine_python_sdk The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended access restrictions and execute arbitrar… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4212 2024-11-21 10:32 2011-10-31 Show GitHub Exploit DB Packet Storm
305912 - google app_engine_python_sdk The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to bypass intended acc… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4211 2024-11-21 10:32 2011-10-31 Show GitHub Exploit DB Packet Storm
305913 8.1 HIGH
Network 		calibre-ebook calibre Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere. - CVE-2011-4126 2024-11-21 10:31 2021-10-27 Show GitHub Exploit DB Packet Storm
305914 9.8 CRITICAL
Network 		calibre-ebook calibre A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root. - CVE-2011-4125 2024-11-21 10:31 2021-10-27 Show GitHub Exploit DB Packet Storm
305915 9.8 CRITICAL
Network 		calibre-ebook calibre Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges. - CVE-2011-4124 2024-11-21 10:31 2021-10-27 Show GitHub Exploit DB Packet Storm
305916 9.8 CRITICAL
Network 		inria caml-light caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install. - CVE-2011-4119 2024-11-21 10:31 2021-10-26 Show GitHub Exploit DB Packet Storm
305917 7.5 HIGH
Network 		google android Android SQLite Journal before 4.0.1 has an information disclosure vulnerability. CWE-200
Information Exposure 		CVE-2011-3901 2024-11-21 10:31 2020-02-13 Show GitHub Exploit DB Packet Storm
305918 7.5 HIGH
Network 		cpan batch\ The Batch::BatchRun module 1.03 for Perl does not properly handle temporary files. NVD-CWE-noinfo
CVE-2011-4117 2024-11-21 10:31 2020-02-1 Show GitHub Exploit DB Packet Storm
305919 7.5 HIGH
Network 		cpan file\ _is_safe in the File::Temp module for Perl does not properly handle symlinks. CWE-59
Link Following 		CVE-2011-4116 2024-11-21 10:31 2020-02-1 Show GitHub Exploit DB Packet Storm
305920 7.5 HIGH
Network 		cpan parallel\ Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files. NVD-CWE-noinfo
CVE-2011-4115 2024-11-21 10:31 2020-02-1 Show GitHub Exploit DB Packet Storm