Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223771 7.8 危険 F5 Networks - 複数の F5 BIG-IP 製品の Traffic Management Microkernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6016 2013-10-29 19:15 2013-10-16 Show GitHub Exploit DB Packet Storm
223772 5 警告 MediaWiki - MediaWiki の includes/resourceloader/ResourceLoaderContext.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-4301 2013-10-29 18:55 2013-09-3 Show GitHub Exploit DB Packet Storm
223773 4 警告 Linux
レッドハット
- Linux Kernel の drivers/usb/serial/io_ti.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1774 2013-10-29 18:51 2013-01-21 Show GitHub Exploit DB Packet Storm
223774 4.3 警告 GNU Project
Carnegie Mellon University (Project Cyrus)
- Cyrus SASL におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2013-4122 2013-10-29 18:47 2013-07-11 Show GitHub Exploit DB Packet Storm
223775 6.9 警告 Canonical - Ubuntu の Linux Kernel パッケージで配布される特定の perf 用 Ubuntu ビルドプロシージャにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1060 2013-10-29 18:41 2013-09-9 Show GitHub Exploit DB Packet Storm
223776 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1713 2013-10-29 18:40 2013-08-6 Show GitHub Exploit DB Packet Storm
223777 6.8 警告 Ben Gillbanks - TimThumb における任意のコードをアップロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2011-4106 2013-10-29 18:38 2011-08-1 Show GitHub Exploit DB Packet Storm
223778 10 危険 Mozilla Foundation - 複数の Mozilla 製品の crypto.generateCRMFRequest 関数における任意の JavaScript コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1710 2013-10-29 18:38 2013-08-6 Show GitHub Exploit DB Packet Storm
223779 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1709 2013-10-29 18:37 2013-08-6 Show GitHub Exploit DB Packet Storm
223780 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-1701 2013-10-29 18:35 2013-08-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 6.5 MEDIUM
Network
n8n-mcp n8n-mcp n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.51.3, the workflow telemetry sanitizer could retain partial fragments of … Update CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-45582 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
82 6.5 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a cross-site request forgery vulnerability on the 2FA toggle. plugin/LoginControl/set.json.php accepts POST type=set2FA val… Update CWE-306
CWE-352
Missing Authentication for Critical Function
 Origin Validation Error
CVE-2026-45610 2026-06-2 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
83 6.5 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, EpgParser.php, plugin/AI/receiveAsync.json.php, and other locations do not use the $resolvedIP out-param of isSSRFSafeURL() for DNS … Update CWE-367
CWE-918
 Time-of-check Time-of-use (TOCTOU) Race Condition
Server-Side Request Forgery (SSRF) 
CVE-2026-45619 2026-06-2 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
84 5.3 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or admin gate. It only has an entry guard: preg_match('/^@/', $_REQUEST['term']) … Update CWE-204
CWE-285
 Response Discrepancy Information Exposure
Improper Authorization
CVE-2026-45620 2026-06-2 03:39 2026-05-29 Show GitHub Exploit DB Packet Storm
85 8.1 HIGH
Network
n8n-mcp n8n-mcp n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.51.2, when ENABLE_MULTI_TENANT=true, the HTTP transport documents that th… Update CWE-284
Improper Access Control
CVE-2026-45707 2026-06-2 03:39 2026-05-29 Show GitHub Exploit DB Packet Storm
86 4.9 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, view/update.php reads $_POST['updateFile'] as a relative path under updatedb/ and passes it to PHP's file() for line-by-line executi… Update CWE-22
Path Traversal
CVE-2026-45731 2026-06-2 03:39 2026-05-29 Show GitHub Exploit DB Packet Storm
87 5.3 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, an unauthenticated remote attacker can read arbitrary image files anywhere on disk that the PHP user can open — including private us… Update CWE-22
Path Traversal
CVE-2026-46337 2026-06-2 03:39 2026-05-29 Show GitHub Exploit DB Packet Storm
88 9.8 CRITICAL
Network
sangoma freepbx FreePBX is an open source IP PBX. From 15.0.42 to before 16.0.45 and 17.0.7, unauthenticated users may be able to access the User Control Panel (UCP) using hard-coded initial template credentials if … Update CWE-798
 Use of Hard-coded Credentials
CVE-2026-46376 2026-06-2 03:38 2026-05-29 Show GitHub Exploit DB Packet Storm
89 5.4 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, AVideo stores category descriptions from user input and later renders category_description as raw HTML in the Gallery view. A user w… Update CWE-79
Cross-site Scripting
CVE-2026-47694 2026-06-2 03:38 2026-05-29 Show GitHub Exploit DB Packet Storm
90 4.3 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, plugin/AuthorizeNet/processPayment.json.php credits the logged-in user's wallet based only on the attacker-controlled amount POST pa… Update CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-47696 2026-06-2 03:38 2026-05-29 Show GitHub Exploit DB Packet Storm