Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226991 3.5 注意 IBM - 複数の IBM InfoSphere Master Data Management 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4036 2013-11-28 16:20 2013-11-22 Show GitHub Exploit DB Packet Storm
226992 3.5 注意 Openbravo - Openbravo ERP に情報漏えいの脆弱性 CWE-200
CWE-264
CVE-2013-3617 2013-11-28 16:10 2013-10-30 Show GitHub Exploit DB Packet Storm
226993 7.1 危険 Linux - Linux Kernel の net/core/flow_dissector.c の skb_flow_dissect 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4348 2013-11-28 16:09 2013-11-2 Show GitHub Exploit DB Packet Storm
226994 5.2 警告 Xen プロジェクト - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4494 2013-11-28 15:34 2013-11-1 Show GitHub Exploit DB Packet Storm
226995 1.9 注意 Antoine Rosset - OsiriX の DICOM リスナーにおける秘密鍵を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-4425 2013-11-28 15:23 2013-11-6 Show GitHub Exploit DB Packet Storm
226996 5.2 警告 Xen プロジェクト - Xen の Ocaml xenstored の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-4416 2013-11-28 15:20 2013-10-29 Show GitHub Exploit DB Packet Storm
226997 4.3 警告 シスコシステムズ - Cisco Prime Network Registrar の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3394 2013-11-28 15:07 2013-11-26 Show GitHub Exploit DB Packet Storm
226998 7.5 危険 Aftabgardan Cultural Center - Testa Online Test Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-6873 2013-11-28 14:47 2013-11-15 Show GitHub Exploit DB Packet Storm
226999 5 警告 Gentoo Linux
MediaWiki
- MediaWiki における拡張機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2032 2013-11-28 14:15 2013-04-30 Show GitHub Exploit DB Packet Storm
227000 4.7 警告 Linux - Linux Kernel の drivers/usb/chipidea/host.c の host_start 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-2058 2013-11-28 14:15 2013-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1401 4.3 MEDIUM
Network
- - Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from the PTY stream wit… CWE-78
CWE-88
OS Command 
Argument Injection
CVE-2026-54686 2026-06-26 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1402 5.3 MEDIUM
Network
- - Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whet… CWE-204
 Response Discrepancy Information Exposure
CVE-2026-53947 2026-06-26 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1403 8.9 HIGH
Network
- - Gogs is an open source self-hosted Git service. Prior to 0.14.3, although .ipynb previews are sanitized on the server side via /-/api/sanitize_ipynb, the inserted content is re-rendered on the client… CWE-79
Cross-site Scripting
CVE-2026-52798 2026-06-26 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1404 8.6 HIGH
Local
- - Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution permission-check bypass in the default unsandboxed … CWE-180
CWE-693
 Incorrect Behavior Order: Validate Before Canonicalize
 Protection Mechanism Failure
CVE-2026-48721 2026-06-26 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1405 - - - Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, the list of disallowed IP address ranges was lacking an IP address range that can be u… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-46348 2026-06-26 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1406 - - - Gogs is an open source self-hosted Git service. Prior to 0.14.3, when ENABLE_REVERSE_PROXY_AUTHENTICATION is enabled, Gogs accepts the configured authentication header (default: X-WEBAUTH-USER) direc… CWE-290
 Authentication Bypass by Spoofing
CVE-2026-25119 2026-06-26 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1407 7.5 HIGH
Network
- - An issue in the t_set_push component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CWE-89
SQL Injection
CVE-2025-61027 2026-06-26 03:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1408 7.5 HIGH
Network
google chrome Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a cr… CWE-416
 Use After Free
CVE-2026-13029 2026-06-26 03:12 2026-06-25 Show GitHub Exploit DB Packet Storm
1409 5.3 MEDIUM
Network
google chrome Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi… CWE-457
 Use of Uninitialized Variable
CVE-2026-13030 2026-06-26 03:12 2026-06-25 Show GitHub Exploit DB Packet Storm
1410 8.8 HIGH
Network
google chrome Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-13031 2026-06-26 03:12 2026-06-25 Show GitHub Exploit DB Packet Storm