Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223231 5.8 警告 IBM - IBM WebSphere Dashboard Framework のチャートコンポーネントにおける画像ファイルを表示または削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6728 2014-02-17 14:17 2013-11-8 Show GitHub Exploit DB Packet Storm
223232 10 危険 IBM - IBM Platform Symphony Developer Edition の不特定のサーブレットにおける認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-5400 2014-02-17 14:16 2013-08-22 Show GitHub Exploit DB Packet Storm
223233 6.5 警告 シマンテック - Symantec Endpoint Protection Manager および Symantec Protection Center Small Business Edition における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5015 2014-02-17 11:26 2013-07-29 Show GitHub Exploit DB Packet Storm
223234 7.5 危険 シマンテック - Symantec Endpoint Protection Manager および Symantec Protection Center Small Business Edition における任意のファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2013-5014 2014-02-17 11:21 2013-07-29 Show GitHub Exploit DB Packet Storm
223235 3.5 注意 IBM - IBM Sametime の Meeting Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6743 2014-02-17 10:58 2013-11-8 Show GitHub Exploit DB Packet Storm
223236 6.8 警告 IBM - IBM Sametime の Meeting Server におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3988 2014-02-17 10:57 2013-06-7 Show GitHub Exploit DB Packet Storm
223237 7.5 危険 IBM - IBM Sametime の Meeting Server におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6742 2014-02-17 10:57 2013-11-8 Show GitHub Exploit DB Packet Storm
223238 7.5 危険 IBM - IBM Sametime の Meeting Server における脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3983 2014-02-17 10:57 2013-06-7 Show GitHub Exploit DB Packet Storm
223239 5 警告 IBM - IBM Sametime の Meeting Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3978 2014-02-17 10:56 2013-06-7 Show GitHub Exploit DB Packet Storm
223240 7.5 危険 シスコシステムズ - Cisco Unified Communications Manager の Enterprise Mobility Application インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-0729 2014-02-14 14:52 2014-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
831 7.3 HIGH
Adjacent 		- - An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the col… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40993 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
832 5.9 MEDIUM
Network 		- - When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a maliciou… New CWE-611
XXE 		CVE-2026-40991 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
833 7.5 HIGH
Network 		- - An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates … New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-40988 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
834 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-10238 2026-06-10 08:16 2026-06-10 Show GitHub Exploit DB Packet Storm
835 8.1 HIGH
Network 		- - Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type. New CWE-284
Improper Access Control 		CVE-2026-36720 2026-06-10 07:16 2026-06-10 Show GitHub Exploit DB Packet Storm
836 7.8 HIGH
Local 		- - Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerab… New - CVE-2026-8863 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
837 6.3 MEDIUM
Network 		- - SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms_user.php. New CWE-352
 Origin Validation Error 		CVE-2026-39170 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
838 7.5 HIGH
Network 		- - SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php. New CWE-284
Improper Access Control 		CVE-2026-39169 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
839 7.5 HIGH
Network 		- - Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. This vulnerability allows attackers to c… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-36822 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm
840 7.5 HIGH
Network 		- - Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows at… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-36821 2026-06-10 06:17 2026-06-10 Show GitHub Exploit DB Packet Storm