Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
421 8.1 重要
Network
Zabbix Zabbix Zabbixにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-23925 2026-06-8 12:32 2026-03-6 Show GitHub Exploit DB Packet Storm
422 5.3 警告
Network
OpenStack Openstack Keystone OpenStackのOpenstack Keystoneにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-33551 2026-06-8 12:32 2026-04-10 Show GitHub Exploit DB Packet Storm
423 6.5 警告
Network
Mattermost, Inc. Mattermost Desktop Mattermost, Inc.のMattermost Desktopにおけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性 New CWE-939
カスタム URL スキームのハンドラの不適切な認可
CVE-2026-3471 2026-06-8 12:32 2026-05-18 Show GitHub Exploit DB Packet Storm
424 7.3 重要
Local
AIOHTTP AIOHTTP AIOHTTPにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-34993 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
425 3.1
Network
Django Software Foundation Django Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性 New CWE-524
重要な情報を含むキャッシュの使用
CVE-2026-35193 2026-06-8 12:31 2026-06-3 Show GitHub Exploit DB Packet Storm
426 6.1 警告
Network
citeum opencti citeumのopenctiにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-35212 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
427 8.2 重要
Network
Mosaic5G Flexric Mosaic5GのFlexricにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-37234 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
428 7.8 重要
Local
radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-40527 2026-06-8 12:31 2026-04-17 Show GitHub Exploit DB Packet Storm
429 7.5 重要
Network
quic-go project quic-go quic-go projectのquic-goにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-40898 2026-06-8 12:31 2026-06-4 Show GitHub Exploit DB Packet Storm
430 6.5 警告
Network
VMware Spring Cloud Function VMwareのSpring Cloud Functionにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御
CVE-2026-40989 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258271 7.8 HIGH
Local
cpanel cpanel cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333). CWE-77
Command Injection
CVE-2017-18400 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258272 3.7 LOW
Network
cpanel cpanel cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332). CWE-264
Permissions, Privileges, and Access Controls
CVE-2017-18399 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258273 3.8 LOW
Network
cpanel cpanel DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331). CWE-20
 Improper Input Validation 
CVE-2017-18398 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258274 3.3 LOW
Local
cpanel cpanel cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330). CWE-275
 Permission Issues
CVE-2017-18397 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258275 5.5 MEDIUM
Local
cpanel cpanel cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329). CWE-200
Information Exposure
CVE-2017-18396 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258276 2.7 LOW
Network
cpanel cpanel cPanel before 68.0.15 does not block a username of ssl (SEC-328). CWE-20
 Improper Input Validation 
CVE-2017-18395 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258277 2.7 LOW
Network
cpanel cpanel cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327). CWE-20
 Improper Input Validation 
CVE-2017-18394 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258278 2.7 LOW
Network
cpanel cpanel cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326). CWE-20
 Improper Input Validation 
CVE-2017-18393 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258279 2.0 LOW
Network
cpanel cpanel cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325). CWE-20
 Improper Input Validation 
CVE-2017-18392 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm
258280 2.5 LOW
Local
cpanel cpanel cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval (SEC-323). CWE-200
Information Exposure
CVE-2017-18391 2024-11-21 12:20 2019-08-2 Show GitHub Exploit DB Packet Storm