Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223201 4.6 警告 SAP - SAP Netweaver ABAP Application Server の Basis の ABAP Help ドキュメンテーションおよび翻訳ツールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3130 2014-05-2 15:24 2014-04-28 Show GitHub Exploit DB Packet Storm
223202 5 警告 SAP - SAP NetWeaver の Software Lifecycle Manager の Java Server Page における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-3129 2014-05-2 15:18 2014-04-28 Show GitHub Exploit DB Packet Storm
223203 3.5 注意 Eugene Pankov - Eugene Pankov Ajenti の plugins/main/content/js/ajenti.coffee におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2260 2014-05-2 15:15 2014-01-16 Show GitHub Exploit DB Packet Storm
223204 7.2 危険 Super Project - Super の super.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0470 2014-05-2 15:10 2014-04-28 Show GitHub Exploit DB Packet Storm
223205 9 危険 フォーティネット - FortiGuard FortiAuthenticator における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6990 2014-05-2 15:07 2013-12-15 Show GitHub Exploit DB Packet Storm
223206 6.5 警告 ブルーコートシステムズ - Blue Coat Content Analysis System のコマンドラインインターフェースにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-2565 2014-05-2 15:05 2014-04-4 Show GitHub Exploit DB Packet Storm
223207 5 警告 レッドハット - Red Hat Enterprise MRG で使用される Cumin における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-6445 2014-05-2 14:55 2013-11-4 Show GitHub Exploit DB Packet Storm
223208 9.3 危険 Debian
Canonical
- dpkg の解凍機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-0471 2014-05-2 14:54 2014-04-28 Show GitHub Exploit DB Packet Storm
223209 5 警告 TIBCO Software - 複数の TIBCO 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-2545 2014-05-2 14:52 2014-04-29 Show GitHub Exploit DB Packet Storm
223210 7.5 危険 Igor Sysoev - nginx の ngx_http_spdy_module モジュールの SPDY の実装における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0088 2014-05-2 14:42 2014-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2491 6.5 MEDIUM
Network
rrwo net\ Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This… CWE-1289
 Improper Validation of Unsafe Equivalence in Input
CVE-2026-49940 2026-06-9 01:35 2026-06-5 Show GitHub Exploit DB Packet Storm
2492 7.5 HIGH
Network
sanbeg etsy\ Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj… CWE-93
CRLF Injection
CVE-2026-46741 2026-06-9 01:33 2026-06-5 Show GitHub Exploit DB Packet Storm
2493 6.5 MEDIUM
Network
google chrome Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions v… CWE-20
CWE-602
 Improper Input Validation 
 Client-Side Enforcement of Server-Side Security
CVE-2026-11287 2026-06-9 01:31 2026-06-5 Show GitHub Exploit DB Packet Storm
2494 5.3 MEDIUM
Network
cosimo net\ Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional st… CWE-93
CRLF Injection
CVE-2026-46739 2026-06-9 01:31 2026-06-5 Show GitHub Exploit DB Packet Storm
2495 7.5 HIGH
Network
oalders html\ HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV retu… CWE-416
 Use After Free
CVE-2026-8829 2026-06-9 01:29 2026-06-4 Show GitHub Exploit DB Packet Storm
2496 5.0 MEDIUM
Local
google chrome Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. (Ch… CWE-472
CWE-190
 External Control of Assumed-Immutable Web Parameter
 Integer Overflow or Wraparound
CVE-2026-11281 2026-06-9 01:27 2026-06-5 Show GitHub Exploit DB Packet Storm
2497 5.4 MEDIUM
Network
- - IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customers that are not assi… CWE-863
 Incorrect Authorization
CVE-2026-42547 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2498 4.7 MEDIUM
Network
- - Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redir… CWE-602
 Client-Side Enforcement of Server-Side Security
CVE-2026-42329 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2499 8.8 HIGH
Network
- - Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. The provisioning cod… CWE-59
Link Following
CVE-2026-41236 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2500 7.3 HIGH
Network
- - A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-11450 2026-06-9 01:16 2026-06-7 Show GitHub Exploit DB Packet Storm