Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
771 5.5 警告
Local 		cilium eBPF ciliumのeBPFにおける複数の脆弱性 CWE-189
CWE-190
CVE-2026-10722 2026-06-11 16:14 2026-06-3 Show GitHub Exploit DB Packet Storm
772 7.5 重要
Network 		CRUX Protocol::HTTP2 CRUXのProtocol::HTTP2における高圧縮データの処理 (データ増幅)に関する脆弱性 CWE-409
高圧縮データの不適切な処理 (データ増幅) 		CVE-2026-10725 2026-06-11 16:14 2026-06-6 Show GitHub Exploit DB Packet Storm
773 6.1 警告
Network 		HCL Technologies Limited Digital Experience Compose
digital experience 		HCL Technologies Limitedのdigital experience等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-21825 2026-06-11 16:14 2026-06-5 Show GitHub Exploit DB Packet Storm
774 6.1 警告
Network 		HCL Technologies Limited Digital Experience Compose
digital experience 		HCL Technologies Limitedのdigital experience等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-21826 2026-06-11 16:14 2026-06-5 Show GitHub Exploit DB Packet Storm
775 8.8 重要
Network 		HCL Technologies Limited Digital Experience Compose
digital experience 		HCL Technologies Limitedのdigital experience等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-21837 2026-06-11 16:14 2026-06-5 Show GitHub Exploit DB Packet Storm
776 5.3 警告
Local 		LMSYS Org SGLang LMSYS OrgのSGLangにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-10775 2026-06-11 16:14 2026-06-3 Show GitHub Exploit DB Packet Storm
777 2.5 低
Local 		Gradio project Gradio Gradio projectのGradioにおける複数の脆弱性 CWE-327
CWE-328
CVE-2026-10783 2026-06-11 16:14 2026-06-4 Show GitHub Exploit DB Packet Storm
778 4.7 警告
Local 		snowflake streamlit Snowflake Inc.のStreamlitにおける複数の脆弱性 CWE-327
CWE-328
CVE-2026-10804 2026-06-11 16:14 2026-06-4 Show GitHub Exploit DB Packet Storm
779 7 重要
Local 		Milvus Milvus Milvusにおける複数の脆弱性 CWE-327
CWE-328
CVE-2026-10814 2026-06-11 16:14 2026-06-4 Show GitHub Exploit DB Packet Storm
780 9.8 緊急
Network 		The Perl Foundation DBI The Perl FoundationのDBIにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-10879 2026-06-11 16:14 2026-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354461 - iss realsecure_nokia ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is en… NVD-CWE-Other
CVE-2002-0480 2016-10-18 11:20 2002-08-12 Show GitHub Exploit DB Packet Storm
354462 - php php move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system. NVD-CWE-Other
CVE-2002-0484 2016-10-18 11:20 2002-08-12 Show GitHub Exploit DB Packet Storm
354463 - linux_directory_penguin nslookup Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters. NVD-CWE-Other
CVE-2002-0489 2016-10-18 11:20 2002-08-12 Show GitHub Exploit DB Packet Storm
354464 - phpbb_group phpbb phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags. NVD-CWE-Other
CVE-2002-0533 2016-10-18 11:20 2002-08-12 Show GitHub Exploit DB Packet Storm
354465 - openbsd openbsd mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cro… NVD-CWE-Other
CVE-2002-0542 2016-10-18 11:20 2002-07-3 Show GitHub Exploit DB Packet Storm
354466 - oracle application_server
application_server_web_cache
oracle8i
oracle9i 		PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listpri… NVD-CWE-Other
CVE-2002-0560 2016-10-18 11:20 2002-07-3 Show GitHub Exploit DB Packet Storm
354467 - oracle application_server
application_server_web_cache
oracle8i
oracle9i 		The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and mod… NVD-CWE-Other
CVE-2002-0561 2016-10-18 11:20 2002-07-3 Show GitHub Exploit DB Packet Storm
354468 - oracle application_server
application_server_web_cache
oracle9i 		The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information inclu… NVD-CWE-Other
CVE-2002-0562 2016-10-18 11:20 2002-07-3 Show GitHub Exploit DB Packet Storm
354469 - oracle application_server
application_server_web_cache
oracle8i
oracle9i 		PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate … NVD-CWE-Other
CVE-2002-0564 2016-10-18 11:20 2002-07-3 Show GitHub Exploit DB Packet Storm
354470 - oracle application_server
oracle8i
oracle9i 		Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConf… NVD-CWE-Other
CVE-2002-0568 2016-10-18 11:20 2002-07-3 Show GitHub Exploit DB Packet Storm