Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225731 10 危険 ヒューレット・パッカード - HP Storage Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2324 2013-06-10 10:50 2013-06-3 Show GitHub Exploit DB Packet Storm
225732 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-1971 2013-06-7 18:37 2012-08-28 Show GitHub Exploit DB Packet Storm
225733 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-1970 2013-06-7 18:33 2012-08-28 Show GitHub Exploit DB Packet Storm
225734 5 警告 Mozilla Foundation - 複数の Mozilla 製品の QCMS の実装におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1960 2013-06-7 18:30 2012-07-17 Show GitHub Exploit DB Packet Storm
225735 10 危険 アドビシステムズ - Adobe Flash Player および AIR の NetStream クラスにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0773 2013-06-7 17:58 2012-03-28 Show GitHub Exploit DB Packet Storm
225736 10 危険 アドビシステムズ - Windows 上で稼働する Adobe Flash Player および AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0772 2013-06-7 17:56 2012-03-28 Show GitHub Exploit DB Packet Storm
225737 5 警告 アドビシステムズ - Adobe Flash Player における重要な情報を取得される脆弱性 CWE-189
数値処理の問題 		CVE-2012-0769 2013-06-7 17:54 2012-03-5 Show GitHub Exploit DB Packet Storm
225738 10 危険 アドビシステムズ - Adobe Flash Player の Matrix3D コンポーネントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0768 2013-06-7 17:53 2012-03-5 Show GitHub Exploit DB Packet Storm
225739 10 危険 アドビシステムズ
Google		 - Google Chrome 上で稼働する Adobe Flash Player におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー 		CVE-2012-0725 2013-06-7 16:59 2012-03-28 Show GitHub Exploit DB Packet Storm
225740 4.3 警告 シスコシステムズ - Cisco WebEx Meetings Server の Event Center モジュールにおけるホスト鍵およびイベントパスワードを破られる脆弱性 CWE-287
不適切な認証 		CVE-2013-1205 2013-06-7 16:56 2013-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2961 8.6 HIGH
Network 		tenable terrascan Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM … CWE-73
CWE-610
CWE-918
 External Control of File Name or Path
Externally Controlled Reference to a Resource in Another Sphere
Server-Side Request Forgery (SSRF)  		CVE-2026-47358 2026-05-20 23:18 2026-05-20 Show GitHub Exploit DB Packet Storm
2962 6.5 MEDIUM
Network 		struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer und… CWE-125
CWE-476
Out-of-bounds Read
 NULL Pointer Dereference 		CVE-2026-32738 2026-05-20 23:17 2026-05-20 Show GitHub Exploit DB Packet Storm
2963 6.5 MEDIUM
Network 		struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 1… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-32739 2026-05-20 23:17 2026-05-20 Show GitHub Exploit DB Packet Storm
2964 6.1 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core: from 11.3.… CWE-79
Cross-site Scripting 		CVE-2026-6367 2026-05-20 23:17 2026-05-20 Show GitHub Exploit DB Packet Storm
2965 6.1 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core: from 8.0.0… CWE-79
Cross-site Scripting 		CVE-2026-6365 2026-05-20 23:17 2026-05-20 Show GitHub Exploit DB Packet Storm
2966 6.1 MEDIUM
Network 		- - Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. The html_filter function did not escape single quotes. HTML attributes inside of single quotes could… CWE-79
Cross-site Scripting 		CVE-2026-5090 2026-05-20 23:17 2026-05-20 Show GitHub Exploit DB Packet Storm
2967 6.8 MEDIUM
Network 		- - Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Local File Inclusion, al… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-35593 2026-05-20 23:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2968 6.8 MEDIUM
Network 		- - EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below allow authenticated users to upload SVG attachments through normal attachment-capable fields and later… CWE-79
Cross-site Scripting 		CVE-2026-33741 2026-05-20 23:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2969 6.5 MEDIUM
Network 		- - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strict_decoding=false (the default), a corrupted tile silently fails to … CWE-200
CWE-908
Information Exposure
 Use of Uninitialized Resource 		CVE-2026-32814 2026-05-20 23:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2970 9.1 CRITICAL
Network 		- - API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records (including bcrypt p… CWE-306
Missing Authentication for Critical Function 		CVE-2026-31071 2026-05-20 23:16 2026-05-20 Show GitHub Exploit DB Packet Storm