Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の XrayWrapper の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1711 2013-08-8 15:40 2013-08-6 Show GitHub Exploit DB Packet Storm
228452 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-1708 2013-08-8 15:36 2013-08-6 Show GitHub Exploit DB Packet Storm
228453 7.2 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の Mozilla Updater におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1707 2013-08-8 15:35 2013-08-6 Show GitHub Exploit DB Packet Storm
228454 7.2 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の Mozilla Maintenance Service におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1706 2013-08-8 15:33 2013-08-6 Show GitHub Exploit DB Packet Storm
228455 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の nsINode::GetParentNode 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1704 2013-08-8 15:31 2013-08-6 Show GitHub Exploit DB Packet Storm
228456 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-1702 2013-08-8 15:29 2013-08-6 Show GitHub Exploit DB Packet Storm
228457 7.5 危険 日本ナショナルインスツルメンツ - National Instruments Lookout の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-5026 2013-08-8 15:27 2013-03-22 Show GitHub Exploit DB Packet Storm
228458 6.4 警告 日本ナショナルインスツルメンツ - National Instruments LabWindows/CVI および LabVIEW などの製品で使用される cw3dgrph.ocx における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-5022 2013-08-8 15:03 2013-03-22 Show GitHub Exploit DB Packet Storm
228459 9.3 危険 ABB
日本ナショナルインスツルメンツ		 - 複数の National Instruments 製品および ABB DataManager などの製品で使用される National Instruments cwui.ocx における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-5021 2013-08-8 15:00 2013-03-22 Show GitHub Exploit DB Packet Storm
228460 2.6 注意 （複数のベンダ） - HTTPS レスポンスから暗号化されたデータの一部を推測可能な脆弱性 (BREACH) - CVE-2013-3587 2013-08-8 14:54 2013-08-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1721 9.1 CRITICAL
Network 		apache apisix Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass.  This issue affects Apache API… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2026-49230 2026-06-24 00:17 2026-06-19 Show GitHub Exploit DB Packet Storm
1722 6.5 MEDIUM
Network 		- - Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email templa… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-39904 2026-06-24 00:17 2026-06-23 Show GitHub Exploit DB Packet Storm
1723 7.2 HIGH
Network 		apache apisix URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session t… CWE-601
Open Redirect 		CVE-2026-48895 2026-06-24 00:17 2026-06-19 Show GitHub Exploit DB Packet Storm
1724 9.1 CRITICAL
Network 		- - Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using … CWE-338
CWE-340
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
 Generation of Predictable Numbers or Identifiers 		CVE-2026-9733 2026-06-24 00:16 2026-06-23 Show GitHub Exploit DB Packet Storm
1725 5.3 MEDIUM
Network 		- - IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized request… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-7253 2026-06-24 00:16 2026-06-23 Show GitHub Exploit DB Packet Storm
1726 - - - The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees pro… CWE-384
 Session Fixation 		CVE-2026-56425 2026-06-24 00:16 2026-06-22 Show GitHub Exploit DB Packet Storm
1727 8.8 HIGH
Network 		misp-project misp MISP core contained multiple broken access-control flaws where authorization checks were performed against the wrong entity, or where ownership/editability checks were missing on write paths. In affe… CWE-639
CWE-862
CWE-863
 Authorization Bypass Through User-Controlled Key
 Missing Authorization
 Incorrect Authorization 		CVE-2026-56424 2026-06-24 00:16 2026-06-22 Show GitHub Exploit DB Packet Storm
1728 8.8 HIGH
Network 		misp-project misp MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affected deleteSelection handlers authorized deletion using broad role-level perm… CWE-862
 Missing Authorization 		CVE-2026-56423 2026-06-24 00:16 2026-06-22 Show GitHub Exploit DB Packet Storm
1729 8.8 HIGH
Network 		- - phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin user… CWE-862
 Missing Authorization 		CVE-2026-56396 2026-06-24 00:16 2026-06-21 Show GitHub Exploit DB Packet Storm
1730 4.8 MEDIUM
Network 		- - Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig component when using the 'Row Heading' column type. The application fails to sanitize input within row h… CWE-79
Cross-site Scripting 		CVE-2026-56383 2026-06-24 00:16 2026-06-21 Show GitHub Exploit DB Packet Storm