Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223611 2.1 注意 OpenStack - OpenStack Image Registry and Delivery Service の API における任意のテナントに画像を挿入される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4354 2013-11-26 14:52 2013-09-26 Show GitHub Exploit DB Packet Storm
223612 6.8 警告 ヒューレット・パッカード - HP 2620 Switch Series の html/json.html におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6852 2013-11-25 16:44 2013-09-26 Show GitHub Exploit DB Packet Storm
223613 4.7 警告 General Electric Company
Catapult Software
- GE Intelligent Platforms 製品で使用される Catapult および GE Intelligent Platforms Proficy の DNP3 I/O ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-2823 2013-11-25 16:42 2013-10-7 Show GitHub Exploit DB Packet Storm
223614 5.4 警告 シスコシステムズ - Cisco 7600 シリーズルータ上で稼働する Cisco IOS の MLDP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-6693 2013-11-25 16:33 2013-11-21 Show GitHub Exploit DB Packet Storm
223615 6.3 警告 シスコシステムズ - Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6692 2013-11-25 16:32 2013-11-21 Show GitHub Exploit DB Packet Storm
223616 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Install / Installation に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5826 2013-11-25 15:34 2013-10-15 Show GitHub Exploit DB Packet Storm
223617 7.8 危険 ISC, Inc.
アップル
- UNIX プラットフォーム上の ISC BIND におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-119
バッファエラー
CVE-2013-2266 2013-11-25 10:53 2013-03-26 Show GitHub Exploit DB Packet Storm
223618 4.6 警告 The phpMyAdmin Project - phpMyAdmin における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-3239 2013-11-25 10:52 2013-04-24 Show GitHub Exploit DB Packet Storm
223619 6 警告 The phpMyAdmin Project - phpMyAdmin における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-3238 2013-11-25 10:51 2013-04-24 Show GitHub Exploit DB Packet Storm
223620 4.9 警告 FreeBSD - FreeBSD の sys/dev/qlxgbe/ql_ioctl.c 内の ql_eioctl 関数における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-6834 2013-11-22 15:13 2013-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
781 8.8 HIGH
Network
- - authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured… New CWE-287
Improper Authentication
CVE-2026-49443 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
782 9.8 CRITICAL
Network
- - authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has been patched in versions … New CWE-287
Improper Authentication
CVE-2026-49448 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
783 8.0 HIGH
Network
- - alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, a sandbox escape vulnerability in the alf.io extension script en… New CWE-863
 Incorrect Authorization
CVE-2026-35482 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
784 7.1 HIGH
Network
- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.7.6, an Insecure Direct Object Reference (IDOR) vulnerability exists in the API keys mana… New CWE-862
 Missing Authorization
CVE-2026-31942 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
785 9.6 CRITICAL
Network
- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR} placeholders aga… New CWE-200
Information Exposure
CVE-2026-32625 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
786 6.5 MEDIUM
Network
- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users with only `VIEW` access to an MCP server can retrieve the server's decrypted a… New CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-44653 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
787 - - - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the o… New CWE-863
 Incorrect Authorization
CVE-2026-44654 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
788 5.5 MEDIUM
Local
- - A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 fi… New CWE-369
 Divide By Zero
CVE-2025-70100 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
789 6.5 MEDIUM
Network
- - An out-of-bounds read in the ext4_ext_binsearch_idx function in src/ext4_extent.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by supplying a specially crafted ext4 files… New CWE-125
Out-of-bounds Read
CVE-2025-70101 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
790 - - - Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. New CWE-259
Use of Hard-coded Password 
CVE-2026-22054 2026-06-5 00:48 2026-06-4 Show GitHub Exploit DB Packet Storm