Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227231	6.9	警告	Linux	-	Linux Kernel の Alchemy LCD フレームバッファドライバにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2013-4511	2013-11-13 14:46	2013-10-29	Show	GitHub Exploit DB Packet Storm

227232	4.9	警告	Linux	-	Linux Kernel の drivers/staging/ozwpan/ozcdev.c の oz_cdev_write 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-4513	2013-11-13 14:46	2013-10-30	Show	GitHub Exploit DB Packet Storm

227233	4.7	警告	Linux	-	Linux Kernel 用 OpenVZ 修正におけるカーネルスタックメモリから重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2239	2013-11-13 14:45	2013-06-28	Show	GitHub Exploit DB Packet Storm

227234	2.9	注意	IBM	-	IBM Lotus Sametime の Enterprise Meeting Server におけるセッション変数を読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-3985	2013-11-13 14:24	2013-11-7	Show	GitHub Exploit DB Packet Storm

227235	4.3	警告	Novell	-	Novell ZENworks Configuration Management の njwc.jar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1097	2013-11-13 14:17	2013-06-3	Show	GitHub Exploit DB Packet Storm

227236	4.3	警告	Novell	-	Novell ZENworks Configuration Management の njwc.jar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1095	2013-11-13 14:15	2013-06-3	Show	GitHub Exploit DB Packet Storm

227237	4.3	警告	Novell	-	Novell ZENworks Configuration Management の zenworks-core におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1094	2013-11-13 14:13	2013-06-3	Show	GitHub Exploit DB Packet Storm

227238	3.5	注意	IBM	-	IBM Lotus Sametime の Enterprise Meeting Server における巧妙に細工されたリンクを共有される脆弱性	CWE-20 不適切な入力確認	CVE-2013-3045	2013-11-13 14:12	2013-11-7	Show	GitHub Exploit DB Packet Storm

227239	5.8	警告	Novell	-	Novell ZENworks Configuration Management の zcc-framework.jar におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2013-1093	2013-11-13 14:11	2013-06-3	Show	GitHub Exploit DB Packet Storm

227240	10	危険	Novell	-	Novell ZENworks Configuration Management の Web サーバにおけるディレクトリトラバーサルの脆弱性	CWE-287 不適切な認証	CVE-2013-1080	2013-11-13 14:09	2013-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1451	-		-	-	Gogs is an open source self-hosted Git service. Prior to 0.14.3, in new_form.tmpl, milestone names are rendered with Go's default auto-escaping ({{.Name}}), which converts < to < etc. This prevent…	CWE-79 Cross-site Scripting	CVE-2026-52807	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

1452	4.3	MEDIUM Network	-	-	Gogs is an open source self-hosted Git service. In 0.14.3 and earlier, any authenticated user can watch a private repository they have no access to, because the access check in the Watch API handler …	CWE-863 Incorrect Authorization	CVE-2026-52795	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

1453	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, UnsafeBlitFormatterBase<T>.Deserialize reads an attacker-controlled byteLength from an extension payload and allocat…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-48514	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1454	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, runtime-generated union deserializers emitted by DynamicUnionResolver do not call MessagePackSecurity.DepthStep(ref …	CWE-674 Uncontrolled Recursion	CVE-2026-48513	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1455	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePack-CSharp's JSON conversion helpers contain multiple recursion paths that do not consistently enforce a dep…	CWE-674 Uncontrolled Recursion	CVE-2026-48512	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1456	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, ExpandoObjectFormatter.Deserialize populates System.Dynamic.ExpandoObject by calling IDictionary<string, object>.Add…	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-48511	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1457	7.5	HIGH Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, when MessagePack-CSharp decompresses Lz4Block or Lz4BlockArray payloads, it reads declared uncompressed lengths from…	CWE-409 CWE-770 Improper Handling of Highly Compressed Data (Data Amplification) Allocation of Resources Without Limits or Throttling	CVE-2026-48510	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1458	9.1	CRITICAL Network	messagepack	messagepack	MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, the parameterless MessagePackInputFormatter() constructor uses default serializer options, which resolve to MessageP…	CWE-1188 Insecure Default Initialization of Resource	CVE-2026-48509	2026-06-26 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1459	4.4	MEDIUM Network	-	-	Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into <a…	CWE-79 Cross-site Scripting	CVE-2026-47733	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

1460	-		-	-	Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12, Rocket.Chat allows users deactivated through…	CWE-613 Insufficient Session Expiration	CVE-2026-45757	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm