Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
351	7.8	重要 Local	Vim	Vim	Vimにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-52860	2026-06-16 13:35	2026-06-11	Show	GitHub Exploit DB Packet Storm

352	5.4	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-53441	2026-06-16 13:35	2026-06-10	Show	GitHub Exploit DB Packet Storm

353	7.1	重要 Local	OpenClaw	OpenClaw	OpenClawにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-53832	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

354	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-53833	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

355	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-53834	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

356	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-53835	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

357	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-53836	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

358	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける安全でない失敗処理に関する脆弱性	CWE-636 安全でない失敗処理	CVE-2026-53837	2026-06-16 13:35	2026-06-12	Show	GitHub Exploit DB Packet Storm

359	8.5	重要 Network	LiteSpeed Technologies	LiteSpeed WHM Plugin (previously cPanel/WHM Plugin) LiteSpeed cPanel Plugin	LiteSpeed TechnologiesのLiteSpeed cPanel Plugin等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-54420	2026-06-16 13:35	2026-06-14	Show	GitHub Exploit DB Packet Storm

360	7.5	重要 Network	vLLM	vLLM	vLLMにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-5497	2026-06-16 13:35	2026-06-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257381	8.8	HIGH Network	ntop	ntopng	Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user…	CWE-352 Origin Validation Error	CVE-2017-5473	2024-11-21 12:27	2017-01-14	Show	GitHub Exploit DB Packet Storm

257382	7.8	HIGH Local	foxitsoftware	foxit_pdf_toolkit	Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim opens the specially crafted PDF file. The Vulnerabili…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5364	2024-11-21 12:27	2017-01-13	Show	GitHub Exploit DB Packet Storm

257383	9.8	CRITICAL Network	libtiff	libtiff	LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5225	2024-11-21 12:27	2017-01-12	Show	GitHub Exploit DB Packet Storm

257384	7.5	HIGH Network	samsung	samsung_mobile	Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016…	CWE-400 Uncontrolled Resource Consumption	CVE-2017-5351	2024-11-21 12:27	2017-01-12	Show	GitHub Exploit DB Packet Storm

257385	7.5	HIGH Network	samsung	samsung_mobile	Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122.	NVD-CWE-noinfo	CVE-2017-5350	2024-11-21 12:27	2017-01-12	Show	GitHub Exploit DB Packet Storm

257386	7.2	HIGH Network	metalgenix	genixcms	SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/ind…	CWE-89 SQL Injection	CVE-2017-5347	2024-11-21 12:27	2017-01-12	Show	GitHub Exploit DB Packet Storm

257387	7.2	HIGH Network	genixcms	genixcms	SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin…	CWE-89 SQL Injection	CVE-2017-5346	2024-11-21 12:27	2017-01-12	Show	GitHub Exploit DB Packet Storm

257388	8.8	HIGH Network	metalgenix	genixcms	SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default…	CWE-89 SQL Injection	CVE-2017-5345	2024-11-21 12:27	2017-01-12	Show	GitHub Exploit DB Packet Storm

257389	9.1	CRITICAL Network	libimobiledevice	libplist	The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) vi…	CWE-125 Out-of-bounds Read	CVE-2017-5209	2024-11-21 12:27	2017-01-12	Show	GitHub Exploit DB Packet Storm

257390	9.8	CRITICAL Network	php netapp	php clustered_data_ontap	Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial o…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5340	2024-11-21 12:27	2017-01-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed