Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228391 7.8 危険 マイクロソフト - Microsoft Windows Server 2012 の Windows NAT ドライバサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-3182 2013-08-15 15:31 2013-08-13 Show GitHub Exploit DB Packet Storm
228392 9.3 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 の Unicode スクリプトプロセッサにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3181 2013-08-15 15:27 2013-08-13 Show GitHub Exploit DB Packet Storm
228393 10 危険 マイクロソフト - 複数の Microsoft Windows 製品における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3175 2013-08-15 15:21 2013-08-13 Show GitHub Exploit DB Packet Storm
228394 9.3 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird におけるクローム特権で任意の JavaScript コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1697 2013-08-14 17:29 2013-06-25 Show GitHub Exploit DB Packet Storm
228395 4.3 警告 Mozilla Foundation - Mozilla Firefox および Thunderbird の SVG フィルタの実装におけるピクセル値を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1693 2013-08-14 17:26 2013-06-25 Show GitHub Exploit DB Packet Storm
228396 4.3 警告 Mozilla Foundation - Mozilla Firefox および Thunderbird におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1692 2013-08-14 17:22 2013-06-25 Show GitHub Exploit DB Packet Storm
228397 9.3 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の SOW および COW の実装における任意の JavaScript コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1687 2013-08-14 16:53 2013-06-25 Show GitHub Exploit DB Packet Storm
228398 10 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の mozilla::ResetDir 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1686 2013-08-14 16:51 2013-06-25 Show GitHub Exploit DB Packet Storm
228399 9.3 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の nsIDocument::GetRootElement 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1685 2013-08-14 16:50 2013-06-25 Show GitHub Exploit DB Packet Storm
228400 9.3 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の mozilla::dom::HTMLMediaElement::LookupMediaElementURITable 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1684 2013-08-14 16:48 2013-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1721 9.1 CRITICAL
Network 		apache apisix Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache API… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2026-49230 2026-06-24 00:17 2026-06-19 Show GitHub Exploit DB Packet Storm
1722 6.5 MEDIUM
Network 		- - Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email templa… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-39904 2026-06-24 00:17 2026-06-23 Show GitHub Exploit DB Packet Storm
1723 7.2 HIGH
Network 		apache apisix URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session t… CWE-601
Open Redirect 		CVE-2026-48895 2026-06-24 00:17 2026-06-19 Show GitHub Exploit DB Packet Storm
1724 9.1 CRITICAL
Network 		- - Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using … CWE-338
CWE-340
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
 Generation of Predictable Numbers or Identifiers 		CVE-2026-9733 2026-06-24 00:16 2026-06-23 Show GitHub Exploit DB Packet Storm
1725 5.3 MEDIUM
Network 		- - IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized request… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-7253 2026-06-24 00:16 2026-06-23 Show GitHub Exploit DB Packet Storm
1726 - - - The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees pro… CWE-384
 Session Fixation 		CVE-2026-56425 2026-06-24 00:16 2026-06-22 Show GitHub Exploit DB Packet Storm
1727 8.8 HIGH
Network 		misp-project misp MISP core contained multiple broken access-control flaws where authorization checks were performed against the wrong entity, or where ownership/editability checks were missing on write paths. In affe… CWE-639
CWE-862
CWE-863
 Authorization Bypass Through User-Controlled Key
 Missing Authorization
 Incorrect Authorization 		CVE-2026-56424 2026-06-24 00:16 2026-06-22 Show GitHub Exploit DB Packet Storm
1728 8.8 HIGH
Network 		misp-project misp MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affected deleteSelection handlers authorized deletion using broad role-level perm… CWE-862
 Missing Authorization 		CVE-2026-56423 2026-06-24 00:16 2026-06-22 Show GitHub Exploit DB Packet Storm
1729 8.8 HIGH
Network 		- - phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin user… CWE-862
 Missing Authorization 		CVE-2026-56396 2026-06-24 00:16 2026-06-21 Show GitHub Exploit DB Packet Storm
1730 4.8 MEDIUM
Network 		- - Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig component when using the 'Row Heading' column type. The application fails to sanitize input within row h… CWE-79
Cross-site Scripting 		CVE-2026-56383 2026-06-24 00:16 2026-06-21 Show GitHub Exploit DB Packet Storm