Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
361 5.5 警告
Local 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-9735 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
362 7.5 重要
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-9740 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
363 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-9743 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
364 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-9747 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
365 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-9748 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
366 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-9750 2026-06-16 13:34 2026-06-9 Show GitHub Exploit DB Packet Storm
367 7.2 重要
Network 		ThingsBoard, Inc. ThingsBoard ThingsBoardにおけるプロトタイプ汚染の脆弱性 CWE-Other
その他 		CVE-2026-53676 2026-06-16 12:16 2026-06-16 Show GitHub Exploit DB Packet Storm
368 6.7 警告
Local 		ソニー株式会社 Optical Disc Archive Software Optical Disc Archive Software（Windows版）のインストーラにおけるインストール時の不適切なファイルアクセス権設定の脆弱性 CWE-Other
その他 		CVE-2026-50255 2026-06-16 12:10 2026-06-16 Show GitHub Exploit DB Packet Storm
369 8.7 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-10087 2026-06-15 18:37 2026-06-11 Show GitHub Exploit DB Packet Storm
370 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-10733 2026-06-15 18:37 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257301 5.9 MEDIUM
Network 		profanity_project profanity An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This… CWE-20
CWE-346
 Improper Input Validation 
 Origin Validation Error 		CVE-2017-5592 2024-11-21 12:27 2017-02-10 Show GitHub Exploit DB Packet Storm
257302 5.9 MEDIUM
Network 		sleekxmpp_project
slixmpp_project
poezio 		sleekxmpp
slixmpp
poezio 		An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This… CWE-20
CWE-346
 Improper Input Validation 
 Origin Validation Error 		CVE-2017-5591 2024-11-21 12:27 2017-02-10 Show GitHub Exploit DB Packet Storm
257303 5.9 MEDIUM
Network 		chatsecure
zom 		chatsecure
zom 		An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This… CWE-20
CWE-346
 Improper Input Validation 
 Origin Validation Error 		CVE-2017-5590 2024-11-21 12:27 2017-02-10 Show GitHub Exploit DB Packet Storm
257304 5.9 MEDIUM
Network 		yaxim bruno
yaxim 		An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This… CWE-20
CWE-346
 Improper Input Validation 
 Origin Validation Error 		CVE-2017-5589 2024-11-21 12:27 2017-02-10 Show GitHub Exploit DB Packet Storm
257305 8.8 HIGH
Local 		firejail_project firejail Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users … CWE-862
 Missing Authorization 		CVE-2017-5180 2024-11-21 12:27 2017-02-10 Show GitHub Exploit DB Packet Storm
257306 5.5 MEDIUM
Local 		zoneminder zoneminder A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated… CWE-200
Information Exposure 		CVE-2017-5595 2024-11-21 12:27 2017-02-7 Show GitHub Exploit DB Packet Storm
257307 8.8 HIGH
Network 		zoneminder zoneminder ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote attack to make changes to the web application as the c… CWE-352
 Origin Validation Error 		CVE-2017-5368 2024-11-21 12:27 2017-02-7 Show GitHub Exploit DB Packet Storm
257308 6.1 MEDIUM
Network 		zoneminder zoneminder Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute… CWE-79
Cross-site Scripting 		CVE-2017-5367 2024-11-21 12:27 2017-02-7 Show GitHub Exploit DB Packet Storm
257309 5.5 MEDIUM
Local 		linux linux_kernel The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local… CWE-388
 7PK - Errors 		CVE-2017-5577 2024-11-21 12:27 2017-02-6 Show GitHub Exploit DB Packet Storm
257310 7.8 HIGH
Local 		linux linux_kernel Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly … CWE-190
 Integer Overflow or Wraparound 		CVE-2017-5576 2024-11-21 12:27 2017-02-6 Show GitHub Exploit DB Packet Storm