Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
731	5.5	警告 Local	NSA	Ghidra	NSAのGhidraにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-52753	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

732	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-52754	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

733	7.8	重要 Local	NSA	Ghidra	NSAのGhidraにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-52755	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

734	6.5	警告 Network	NSA	Ghidra	NSAのGhidraにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-52756	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

735	4.4	警告 Local	NSA	Ghidra	NSAのGhidraにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-52757	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

736	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-52758	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

737	5.5	警告 Local	NSA	Ghidra	NSAのGhidraにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-52759	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

738	8.8	重要 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-53435	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

739	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-53436	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

740	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-53437	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257361	5.9	MEDIUM Network	fiberhome	fengine_s5800_firmware	An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly…	CWE-400 Uncontrolled Resource Consumption	CVE-2017-5544	2024-11-21 12:27	2017-01-23	Show	GitHub Exploit DB Packet Storm

257362	8.8	HIGH Network	metalgenix	genixcms	The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files wit…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-5520	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

257363	9.8	CRITICAL Network	metalgenix	genixcms	SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2017-5519	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

257364	7.4	HIGH Network	metalgenix	genixcms	The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-5518	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

257365	9.8	CRITICAL Network	metalgenix	genixcms	SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter.	CWE-89 SQL Injection	CVE-2017-5517	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

257366	6.1	MEDIUM Network	metalgenix	genixcms	Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters.	CWE-79 Cross-site Scripting	CVE-2017-5516	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

257367	5.4	MEDIUM Network	metalgenix	genixcms	Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names.	CWE-79 Cross-site Scripting	CVE-2017-5515	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

257368	5.5	MEDIUM Local	phpmailer_project	phpmailer	An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to…	CWE-200 Information Exposure	CVE-2017-5223	2024-11-21 12:27	2017-01-16	Show	GitHub Exploit DB Packet Storm

257369	5.4	MEDIUM Network	b2evolution	b2evolution	Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (…	CWE-79 Cross-site Scripting	CVE-2017-5494	2024-11-21 12:27	2017-01-16	Show	GitHub Exploit DB Packet Storm

257370	8.1	HIGH Network	b2evolution	b2evolution	Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to prov…	CWE-22 Path Traversal	CVE-2017-5480	2024-11-21 12:27	2017-01-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed