Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
271 5.4 警告
Network 		n8n n8n n8nにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-54302 2026-06-29 11:12 2026-06-23 Show GitHub Exploit DB Packet Storm
272 7.7 重要
Network 		n8n n8n n8nにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-54304 2026-06-29 11:12 2026-06-23 Show GitHub Exploit DB Packet Storm
273 9.9 緊急
Network 		n8n n8n n8nにおける複数の脆弱性 New CWE-200
CWE-284
CVE-2026-54305 2026-06-29 11:12 2026-06-23 Show GitHub Exploit DB Packet Storm
274 6.4 警告
Network 		n8n n8n n8nにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 New CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) 		CVE-2026-54306 2026-06-29 11:11 2026-06-23 Show GitHub Exploit DB Packet Storm
275 9.6 緊急
Network 		n8n n8n n8nにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-54307 2026-06-29 11:11 2026-06-23 Show GitHub Exploit DB Packet Storm
276 7.2 重要
Network 		n8n n8n n8nにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避 		CVE-2026-54308 2026-06-29 11:11 2026-06-23 Show GitHub Exploit DB Packet Storm
277 7.6 重要
Adjacent 		Home Assistant Home Assistant Home Assistantにおける複数の脆弱性 New CWE-200
CWE-306
CVE-2026-54317 2026-06-29 11:11 2026-06-23 Show GitHub Exploit DB Packet Storm
278 7.1 重要
Local 		Home Assistant home assistant companion Home Assistantのhome assistant companionにおけるAndroid アプリケーションコンポーネントの不適切なエクスポートの脆弱性 New CWE-926
Android アプリケーションコンポーネントの不適切なエクスポート 		CVE-2026-54318 2026-06-29 11:11 2026-06-23 Show GitHub Exploit DB Packet Storm
279 6.5 警告
Network 		Aqua Security Trivy Aqua SecurityのTrivyにおける複数の脆弱性 New CWE-770
CWE-789
CVE-2026-54448 2026-06-29 11:11 2026-06-25 Show GitHub Exploit DB Packet Storm
280 5.5 警告
Local 		jqlang jq jqlangのjqにおける整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-54679 2026-06-29 11:11 2026-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259571 7.8 HIGH
Local 		linux linux_kernel drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-5547 2024-11-21 12:27 2017-02-6 Show GitHub Exploit DB Packet Storm
259572 7.8 HIGH
Local 		linux linux_kernel The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possi… NVD-CWE-noinfo
CVE-2017-5546 2024-11-21 12:27 2017-02-6 Show GitHub Exploit DB Packet Storm
259573 6.2 MEDIUM
Local 		sendquick entera_sms_gateway_firmware
avera_sms_gateway_firmware 		An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2017-5137 2024-11-21 12:27 2017-02-6 Show GitHub Exploit DB Packet Storm
259574 7.5 HIGH
Network 		sendquick entera_sms_gateway_firmware
avera_sms_gateway_firmware 		An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown … CWE-862
 Missing Authorization 		CVE-2017-5136 2024-11-21 12:27 2017-02-6 Show GitHub Exploit DB Packet Storm
259575 9.8 CRITICAL
Network 		netapp oncommand_insight The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account. CWE-798
 Use of Hard-coded Credentials 		CVE-2017-5600 2024-11-21 12:27 2017-02-3 Show GitHub Exploit DB Packet Storm
259576 9.8 CRITICAL
Network 		sagecrm sagecrm An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager functionality, provided by SageCRM, permits additional components to be added to the application to enhance provided funct… CWE-22
Path Traversal 		CVE-2017-5219 2024-11-21 12:27 2017-02-2 Show GitHub Exploit DB Packet Storm
259577 8.8 HIGH
Network 		sagecrm sagecrm A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_DocumentUI.asp web resource includes Utilityfuncs.js when the file is opened or viewed. This file crafts a SQL statement to … CWE-89
SQL Injection 		CVE-2017-5218 2024-11-21 12:27 2017-02-2 Show GitHub Exploit DB Packet Storm
259578 4.9 MEDIUM
Network 		citrix xenserver An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators. NVD-CWE-noinfo
CVE-2017-5573 2024-11-21 12:27 2017-01-31 Show GitHub Exploit DB Packet Storm
259579 6.5 MEDIUM
Network 		citrix xenserver An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database. CWE-269
 Improper Privilege Management 		CVE-2017-5572 2024-11-21 12:27 2017-01-31 Show GitHub Exploit DB Packet Storm
259580 6.1 MEDIUM
Network 		piwigo piwigo Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename. CWE-79
Cross-site Scripting 		CVE-2017-5608 2024-11-21 12:27 2017-01-29 Show GitHub Exploit DB Packet Storm