Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1421	4.3	警告 Network	7-Zip	7-Zip	7-Zipにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-48102	2026-06-9 14:13	2026-06-5	Show	GitHub Exploit DB Packet Storm

1422	7.1	重要 Network	7-Zip	7-Zip	7-Zipにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-48103	2026-06-9 14:13	2026-06-5	Show	GitHub Exploit DB Packet Storm

1423	4.2	警告 Network	7-Zip	7-Zip	7-Zipにおける複数の脆弱性	CWE-125 CWE-908	CVE-2026-48104	2026-06-9 14:13	2026-06-5	Show	GitHub Exploit DB Packet Storm

1424	7.1	重要 Network	7-Zip	7-Zip	7-Zipにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-48111	2026-06-9 14:13	2026-06-5	Show	GitHub Exploit DB Packet Storm

1425	6.5	警告 Network	7-Zip	7-Zip	7-Zipにおける複数の脆弱性	CWE-125 CWE-190	CVE-2026-48112	2026-06-9 14:13	2026-06-5	Show	GitHub Exploit DB Packet Storm

1426	8.8	重要 Adjacent	日本エイサー	Predator Connect W6x Firmware	エイサーのPredator Connect W6x Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-49195	2026-06-9 14:13	2026-05-29	Show	GitHub Exploit DB Packet Storm

1427	7.2	重要 Network	日本エイサー	Predator Connect W6x Firmware	エイサーのPredator Connect W6x Firmwareにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-49196	2026-06-9 14:13	2026-05-29	Show	GitHub Exploit DB Packet Storm

1428	9.8	緊急 Network	日本エイサー	Predator Connect W6x Firmware	エイサーのPredator Connect W6x Firmwareにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-49197	2026-06-9 14:13	2026-05-29	Show	GitHub Exploit DB Packet Storm

1429	4.9	警告 Network	日本エイサー	Predator Connect W6x Firmware	エイサーのPredator Connect W6x Firmwareにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-49198	2026-06-9 14:13	2026-05-29	Show	GitHub Exploit DB Packet Storm

1430	9.1	緊急 Network	Apache Software Foundation	Apache Fory	Apache Software FoundationのApache Foryにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-50076	2026-06-9 14:13	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255201	5.3	MEDIUM Network	eclipse debian	mosquitto debian_linux	The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject invalid UTF-8 strings to disconnect the…	CWE-20 Improper Input Validation	CVE-2017-7653	2024-11-21 12:32	2018-06-6	Show	GitHub Exploit DB Packet Storm

255202	7.5	HIGH Network	eclipse debian	mosquitto debian_linux	In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lo…	NVD-CWE-noinfo	CVE-2017-7652	2024-11-21 12:32	2018-04-25	Show	GitHub Exploit DB Packet Storm

255203	7.5	HIGH Network	eclipse debian	mosquitto debian_linux	In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authentications if occur …	CWE-400 Uncontrolled Resource Consumption	CVE-2017-7651	2024-11-21 12:32	2018-04-24	Show	GitHub Exploit DB Packet Storm

255204	9.8	CRITICAL Network	saltstack	salt	In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.	NVD-CWE-noinfo	CVE-2017-7893	2024-11-21 12:32	2018-04-24	Show	GitHub Exploit DB Packet Storm

255205	5.4	MEDIUM Network	redhat	openshift	OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creat…	CWE-79 Cross-site Scripting	CVE-2017-7534	2024-11-21 12:32	2018-04-12	Show	GitHub Exploit DB Packet Storm

255206	6.1	MEDIUM Network	qnap	qts	Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.	CWE-79 Cross-site Scripting	CVE-2017-7632	2024-11-21 12:32	2018-03-28	Show	GitHub Exploit DB Packet Storm

255207	6.1	MEDIUM Network	qnap	qts	Cross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web …	CWE-79 Cross-site Scripting	CVE-2017-7631	2024-11-21 12:32	2018-03-28	Show	GitHub Exploit DB Packet Storm

255208	5.3	MEDIUM Network	qnap	qts	QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinf…	CWE-200 Information Exposure	CVE-2017-7630	2024-11-21 12:32	2018-03-28	Show	GitHub Exploit DB Packet Storm

255209	8.8	HIGH Network	qnap	media_streaming_add-on	QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.	CWE-352 Origin Validation Error	CVE-2017-7641	2024-11-21 12:32	2018-03-8	Show	GitHub Exploit DB Packet Storm

255210	9.8	CRITICAL Network	qnap	media_streaming_add-on	QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges.	CWE-78 OS Command	CVE-2017-7640	2024-11-21 12:32	2018-03-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed