Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228641 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-3164 2013-07-24 14:12 2013-07-9 Show GitHub Exploit DB Packet Storm
228642 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 10 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3166 2013-07-24 14:11 2013-07-9 Show GitHub Exploit DB Packet Storm
228643 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-3174 2013-07-24 14:10 2013-07-9 Show GitHub Exploit DB Packet Storm
228644 6.9 警告 マイクロソフト - Microsoft Windows 7 および Windows Server 2008 R2 の Windows Defender の署名更新機能における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3154 2013-07-24 14:07 2013-07-9 Show GitHub Exploit DB Packet Storm
228645 4 警告 サイボウズ - サイボウズ Office におけるセッション管理不備の脆弱性 CWE-287
不適切な認証
CVE-2013-3656 2013-07-23 19:09 2013-07-16 Show GitHub Exploit DB Packet Storm
228646 5.1 警告 strongSwan - strongSwan の atodn 関数におけるバッファオーバーフローの脆弱 CWE-119
バッファエラー
CVE-2013-2054 2013-07-23 19:07 2013-05-13 Show GitHub Exploit DB Packet Storm
228647 2.1 注意 Jordan de Laune - Drupal 用 MP3 Player モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1971 2013-07-23 19:03 2013-04-17 Show GitHub Exploit DB Packet Storm
228648 4.3 警告 マカフィー - McAfee ePolicy Orchestrator および McAfee Agent 用 ePolicy Orchestrator エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4883 2013-07-23 15:05 2013-06-12 Show GitHub Exploit DB Packet Storm
228649 6.5 警告 マカフィー - McAfee ePolicy Orchestrator および McAfee Agent 用 ePolicy Orchestrator エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4882 2013-07-23 15:05 2013-05-25 Show GitHub Exploit DB Packet Storm
228650 7.9 危険 ヒューレット・パッカード - HP Database and Middleware Automation における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-2365 2013-07-23 15:03 2013-07-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1711 - - - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans snd_usbmidi_get_ms_info() validates the internal MIDIStreaming endpoint des… - CVE-2026-52963 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1712 - - - In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during … - CVE-2026-52962 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1713 - - - In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size The generic/642 test-case can reproduce the kernel crash: … - CVE-2026-52961 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1714 - - - In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure Apply the same fix as b2ed01e7ad ("drm/ttm: Fix ttm_bo_swapout()… - CVE-2026-52949 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1715 - - - In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl While fuzzing with Syzkaller, a persistent `schedule_timeout: wrong timeo… - CVE-2026-52948 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1716 7.7 HIGH
Network
- - The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An authenticated Viewer-role user can escape the plugin's resource sandbox and access administrative Loki en… CWE-22
Path Traversal
CVE-2026-42129 2026-06-25 02:17 2026-06-22 Show GitHub Exploit DB Packet Storm
1717 9.6 CRITICAL
Network
- - The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connecte… CWE-284
Improper Access Control
CVE-2026-28381 2026-06-25 02:16 2026-06-22 Show GitHub Exploit DB Packet Storm
1718 9.0 CRITICAL
Network
- - In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, l… CWE-287
CWE-330
CWE-340
Improper Authentication
 Use of Insufficiently Random Values
 Generation of Predictable Numbers or Identifiers
CVE-2026-11374 2026-06-25 02:16 2026-06-23 Show GitHub Exploit DB Packet Storm
1719 5.9 MEDIUM
Network
- - IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted reques… CWE-476
 NULL Pointer Dereference
CVE-2026-10852 2026-06-25 02:16 2026-06-23 Show GitHub Exploit DB Packet Storm
1720 5.4 MEDIUM
Network
- - The Tempo and Loki datasource plugins construct backend HTTP requests by interpolating user-supplied input into URL paths without sanitization, enabling path traversal. A Viewer-role user can: (1) ca… CWE-22
Path Traversal
CVE-2026-10601 2026-06-25 02:16 2026-06-22 Show GitHub Exploit DB Packet Storm