Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227871 5 警告 シスコシステムズ - Cisco Unified Computing System のファブリックインターコネクトコンポーネントの XML API サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4079 2013-09-27 14:23 2013-09-27 Show GitHub Exploit DB Packet Storm
227872 4.3 警告 Click2Sell - Drupal 用 Click2Sell Suite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5938 2013-09-27 11:50 2013-09-11 Show GitHub Exploit DB Packet Storm
227873 6.8 警告 Click2Sell - Drupal 用 Click2Sell Suite モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-5937 2013-09-27 11:46 2013-09-11 Show GitHub Exploit DB Packet Storm
227874 4.3 警告 Wikka Development Team - WikkaWiki の wikka.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5586 2013-09-27 11:44 2013-08-31 Show GitHub Exploit DB Packet Storm
227875 4.3 警告 Linux - ARM プラットフォーム上で稼働する Linux Kernel の arch/arm/kvm/arm.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-5634 2013-09-27 11:41 2013-06-3 Show GitHub Exploit DB Packet Storm
227876 9.7 危険 日立 - JP1/Cm2/Network Node Manager i に同梱されている Java における複数の脆弱性 CWE-noinfo
情報不足
- 2013-09-26 20:41 2013-09-20 Show GitHub Exploit DB Packet Storm
227877 9.7 危険 日立 - JP1/Cm2/Network Node Manager i における複数の脆弱性 CWE-noinfo
情報不足
- 2013-09-26 20:40 2013-09-20 Show GitHub Exploit DB Packet Storm
227878 4.3 警告 Open-Xchange - Open-Xchange App Suite の Hazelcast クラスタ API における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-5936 2013-09-26 19:23 2013-09-10 Show GitHub Exploit DB Packet Storm
227879 4.3 警告 Open-Xchange - Open-Xchange App Suite の Hazelcast クラスタ API におけるアクセス権を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-5935 2013-09-26 19:05 2013-09-10 Show GitHub Exploit DB Packet Storm
227880 4 警告 Open-Xchange - Open-Xchange App Suite におけるクラスタを展開される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-5934 2013-09-26 18:59 2013-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1571 7.8 HIGH
Local
- - Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace with a maliciously… New CWE-61
 UNIX Symbolic Link (Symlink) Following
CVE-2026-12958 2026-06-24 04:36 2026-06-24 Show GitHub Exploit DB Packet Storm
1572 6.5 MEDIUM
Network
- - SQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute arbitrary code via the getDimensionsValues component New CWE-89
SQL Injection
CVE-2026-52673 2026-06-24 04:35 2026-06-24 Show GitHub Exploit DB Packet Storm
1573 - - - Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs. New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2025-62180 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1574 5.2 MEDIUM
Local
- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocket connection was opened, Deno checked the destination hostname against --deny-net rules but did not re-check … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-49860 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1575 5.2 MEDIUM
Local
- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, environment access is gated by the env permission. You can deny it with --deny-env, or restrict it to a specific allowlist w… New CWE-863
 Incorrect Authorization
CVE-2026-49983 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1576 4.3 MEDIUM
Network
- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.5, a Deno program that opens a client WebSocket connection could be crashed by the remote server. While handling the WebSocket … New CWE-248
 Uncaught Exception
CVE-2026-55517 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1577 7.6 HIGH
Adjacent
- - Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.6.0, the Konnected integration registers an HTTP endpoint, KonnectedView (homeassistant… New CWE-200
CWE-306
Information Exposure
Missing Authentication for Critical Function
CVE-2026-54317 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1578 - - - Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including att… New CWE-183
CWE-200
CWE-515
 Permissive List of Allowed Inputs
Information Exposure
CVE-2026-54316 2026-06-24 04:32 2026-06-24 Show GitHub Exploit DB Packet Storm
1579 7.5 HIGH
Network
- - An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New CWE-89
SQL Injection
CVE-2025-61024 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm
1580 7.5 HIGH
Network
- - An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New CWE-89
SQL Injection
CVE-2025-61029 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm