Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1431	9.8	緊急 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2026-50214	2026-06-9 14:13	2026-06-4	Show	GitHub Exploit DB Packet Storm

1432	4.9	警告 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-50224	2026-06-9 14:13	2026-06-4	Show	GitHub Exploit DB Packet Storm

1433	9.1	緊急 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-50225	2026-06-9 14:12	2026-06-4	Show	GitHub Exploit DB Packet Storm

1434	5.3	警告 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおけるハードコードされた暗号鍵の使用に関する脆弱性	CWE-321 ハードコードされた暗号鍵の使用	CVE-2026-50226	2026-06-9 14:12	2026-06-4	Show	GitHub Exploit DB Packet Storm

1435	5.4	警告 Network	Check MK	Check MK	Check MKにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-7186	2026-06-9 14:12	2026-06-8	Show	GitHub Exploit DB Packet Storm

1436	4.8	警告 Network	Check MK	Check MK	Check MKにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-8078	2026-06-9 14:12	2026-06-8	Show	GitHub Exploit DB Packet Storm

1437	4.8	警告 Network	Check MK	Check MK	Check MKにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-9549	2026-06-9 14:12	2026-06-8	Show	GitHub Exploit DB Packet Storm

1438	6.5	警告 Adjacent	エリクソン	Packet Core Controller	エリクソンのPacket Core Controllerにおける不正な構文構造の不適切な処理に関する脆弱性	CWE-228 不正な構文構造の不適切な処理	CVE-2025-59174	2026-06-9 14:12	2026-06-5	Show	GitHub Exploit DB Packet Storm

1439	8.8	重要 Network	Pointsharp	ID Server	PointsharpのID Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3999	2026-06-9 14:12	2026-03-13	Show	GitHub Exploit DB Packet Storm

1440	7.8	重要 Local	レッドハット X.Org Foundation	X.Org X Server xwayland Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-50256	2026-06-9 14:12	2026-06-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255241	5.9	MEDIUM Network	osisoft	pi_data_archive	An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a m…	CWE-287 Improper Authentication	CVE-2017-7934	2024-11-21 12:32	2017-08-26	Show	GitHub Exploit DB Packet Storm

255242	7.4	HIGH Network	osisoft	pi_data_archive	An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the…	CWE-287 Improper Authentication	CVE-2017-7930	2024-11-21 12:32	2017-08-26	Show	GitHub Exploit DB Packet Storm

255243	8.8	HIGH Network	osisoft	pi_web_api	A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-u…	CWE-352 Origin Validation Error	CVE-2017-7926	2024-11-21 12:32	2017-08-26	Show	GitHub Exploit DB Packet Storm

255244	8.8	HIGH Network	powerdns	dnsdist	dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.	CWE-352 Origin Validation Error	CVE-2017-7557	2024-11-21 12:32	2017-08-22	Show	GitHub Exploit DB Packet Storm

255245	8.8	HIGH Network	hawt	hawtio	Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted …	CWE-352 Origin Validation Error	CVE-2017-7556	2024-11-21 12:32	2017-08-18	Show	GitHub Exploit DB Packet Storm

255246	9.8	CRITICAL Network	augeas	augeas	Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the applicatio…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7555	2024-11-21 12:32	2017-08-18	Show	GitHub Exploit DB Packet Storm

255247	9.8	CRITICAL Network	fedoraproject	389_directory_server	389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.	-	CVE-2017-7551	2024-11-21 12:32	2017-08-17	Show	GitHub Exploit DB Packet Storm

255248	7.5	HIGH Network	postgresql debian	postgresql debian_linux	PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents o…	NVD-CWE-noinfo	CVE-2017-7548	2024-11-21 12:32	2017-08-17	Show	GitHub Exploit DB Packet Storm

255249	8.8	HIGH Network	postgresql	postgresql	PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by…	NVD-CWE-noinfo	CVE-2017-7547	2024-11-21 12:32	2017-08-17	Show	GitHub Exploit DB Packet Storm

255250	9.8	CRITICAL Network	postgresql debian	postgresql debian_linux	PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.	CWE-287 Improper Authentication	CVE-2017-7546	2024-11-21 12:32	2017-08-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed