Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223951	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5567	2014-04-8 14:39	2012-11-14	Show	GitHub Exploit DB Packet Storm

223952	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5566	2014-04-8 14:33	2012-05-29	Show	GitHub Exploit DB Packet Storm

223953	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5565	2014-04-8 14:32	2012-11-14	Show	GitHub Exploit DB Packet Storm

223954	4	警告	シスコシステムズ	-	Cisco Unity Connection のメッセージング API におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-2145	2014-04-8 14:30	2014-04-7	Show	GitHub Exploit DB Packet Storm

223955	6.1	警告	シスコシステムズ	-	Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2144	2014-04-8 14:30	2014-04-4	Show	GitHub Exploit DB Packet Storm

223956	6.8	警告	Lee Howard	-	HylaFAX+ の hfaxd におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-5680	2014-04-8 13:59	2013-08-6	Show	GitHub Exploit DB Packet Storm

223957	4.3	警告	Klaus Purer	-	Drupal 用 RESTful Web Services モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-1946	2014-04-8 13:36	2013-04-10	Show	GitHub Exploit DB Packet Storm

223958	4	警告	ヒューレット・パッカード	-	HP IceWall Identity Manager および IceWall SSO パスワードリセットオプションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-2600	2014-04-8 12:27	2014-04-3	Show	GitHub Exploit DB Packet Storm

223959	2.1	注意	GNU Project	-	spy_user 関数およびその他の関数で使用される a2ps の lib/routines.h 内の tempname_ensure 関数における任意のファイルを変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2001-1593	2014-04-8 12:04	2001-02-12	Show	GitHub Exploit DB Packet Storm

223960	5	警告	マイクロソフト	-	Microsoft Office 2007 から 2013 におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-2730	2014-04-8 11:26	2014-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2801	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust s…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-47904	2026-06-16 02:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

2802	6.5	MEDIUM Network	mongodb	mongodb	The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechani…	CWE-617 Reachable Assertion	CVE-2026-9748	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

2803	6.5	MEDIUM Network	mongodb	mongodb	An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in…	CWE-617 Reachable Assertion	CVE-2026-9750	2026-06-16 02:10	2026-06-10	Show	GitHub Exploit DB Packet Storm

2804	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71329	2026-06-16 02:09	2026-06-10	Show	GitHub Exploit DB Packet Storm

2805	8.8	HIGH Network	splunk	splunk splunk_cloud_platform splunk_secure_gateway	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers…	CWE-502 Deserialization of Untrusted Data	CVE-2026-20251	2026-06-16 02:08	2026-06-11	Show	GitHub Exploit DB Packet Storm

2806	7.5	HIGH Network	image-size	image-size	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2025-71330	2026-06-16 02:00	2026-06-10	Show	GitHub Exploit DB Packet Storm

2807	6.5	MEDIUM Network	mongodb	mongodb	Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.	CWE-617 Reachable Assertion	CVE-2026-9747	2026-06-16 01:58	2026-06-10	Show	GitHub Exploit DB Packet Storm

2808	6.5	MEDIUM Network	mongodb	mongodb	In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may derefe…	CWE-476 NULL Pointer Dereference	CVE-2026-9743	2026-06-16 01:56	2026-06-10	Show	GitHub Exploit DB Packet Storm

2809	7.5	HIGH Network	mongodb	mongodb	A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain n…	CWE-674 Uncontrolled Recursion	CVE-2026-9740	2026-06-16 01:55	2026-06-10	Show	GitHub Exploit DB Packet Storm

2810	7.6	HIGH Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privile…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-20252	2026-06-16 01:51	2026-06-11	Show	GitHub Exploit DB Packet Storm