Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 4.3 警告
Network 		Kostyasha Github Integration KostyashaのGithub Integrationにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-48925 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
202 5.5 警告
Network 		Jenkins プロジェクト buildgraph-view Jenkinsのbuildgraph-viewにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-48927 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
203 6.5 警告
Network 		IBM IBM i IBMのIBM Iにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-6936 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
204 2.7 低
Network 		Synology Inc. Surveillance Station Synology Inc.のSurveillance Stationにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2024-47267 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
205 4.9 警告
Network 		Synology Inc. Surveillance Station Synology Inc.のSurveillance Stationにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2024-47268 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
206 4.9 警告
Network 		Synology Inc. Surveillance Station Synology Inc.のSurveillance Stationにおける重要な情報の平文での送信に関する脆弱性 New CWE-319
重要な情報の平文での送信 		CVE-2024-47269 2026-06-3 15:37 2026-05-27 Show GitHub Exploit DB Packet Storm
207 2.7 低
Network 		Synology Inc. Surveillance Station Synology Inc.のSurveillance Stationにおけるパーミッションの不適切な保持に関する脆弱性 New CWE-281
パーミッションの不適切な保持 		CVE-2024-47270 2026-06-3 15:37 2026-05-27 Show GitHub Exploit DB Packet Storm
208 4.9 警告
Network 		Synology Inc. Surveillance Station Synology Inc.のSurveillance Stationにおける認証情報の不十分な保護に関する脆弱性 New CWE-522
認証情報の不十分な保護 		CVE-2024-47271 2026-06-3 15:37 2026-05-27 Show GitHub Exploit DB Packet Storm
209 2.7 低
Network 		Synology Inc. Surveillance Station Synology Inc.のSurveillance Stationにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2024-47272 2026-06-3 15:37 2026-05-27 Show GitHub Exploit DB Packet Storm
210 4.3 警告
Network 		IBM IBM Business Automation Workflow IBMのIBM Business Automation Workflowにおけるエラーメッセージによる情報漏えいに関する脆弱性 New CWE-209
エラーメッセージによる情報漏えい 		CVE-2026-1248 2026-06-3 15:37 2026-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
356391 - hans_wolters phpreview Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews. NVD-CWE-Other
CVE-2001-1516 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356392 - intel xircom_rex_6000 Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, and capturing the cleartext PIN. NVD-CWE-Other
CVE-2001-1520 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356393 - francisco_burzi php-nuke Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message. NVD-CWE-Other
CVE-2001-1522 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356394 - dmozgateway dmozgateway Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic parameter. NVD-CWE-Other
CVE-2001-1523 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356395 - easyscripts easynews Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter. NVD-CWE-Other
CVE-2001-1525 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356396 - easyscripts easynews Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter. NVD-CWE-Other
CVE-2001-1526 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356397 - ibm aix Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this… NVD-CWE-Other
CVE-2001-1529 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356398 - webmin webmin run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands. NVD-CWE-Other
CVE-2001-1530 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356399 - apple claris_emailer Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename. NVD-CWE-Other
CVE-2001-1531 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm
356400 - web_crossing webx WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user s… NVD-CWE-Other
CVE-2001-1532 2008-09-6 05:26 2001-12-31 Show GitHub Exploit DB Packet Storm