Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4461 6.5 警告
Adjacent
ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-41286 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
4462 6.5 警告
Adjacent
ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-41287 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
4463 7.8 重要
Local
ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-41288 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
4464 9.9 緊急
Network
Mozilla Foundation 0DIN Scanner Mozilla Foundationの0DIN Scannerにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-41512 2026-05-13 10:26 2026-05-8 Show GitHub Exploit DB Packet Storm
4465 9.8 緊急
Network
D-Link Systems, Inc. DIR-456U Firmware D-Link CorporationのDIR-456U Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2026-42376 2026-05-13 10:26 2026-05-4 Show GitHub Exploit DB Packet Storm
4466 6.5 警告
Network
langflow Langflow Desktop langflowのLangflow Desktopにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-4502 2026-05-13 10:26 2026-04-30 Show GitHub Exploit DB Packet Storm
4467 7.5 重要
Network
langflow Langflow Desktop langflowのLangflow Desktopにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-4503 2026-05-13 10:26 2026-04-30 Show GitHub Exploit DB Packet Storm
4468 8.8 重要
Network
langflow Langflow Desktop langflowのLangflow Desktopにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-6543 2026-05-13 10:26 2026-04-30 Show GitHub Exploit DB Packet Storm
4469 7.8 重要
Local
ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用
CVE-2026-6787 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
4470 7.8 重要
Local
ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-6788 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313271 9.8 CRITICAL
Network
clamav
debian
clamav
debian_linux
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. NVD-CWE-Other
CVE-2007-6745 2024-11-21 09:40 2019-11-8 Show GitHub Exploit DB Packet Storm
313272 8.8 HIGH
Network
sas sas_drug_development SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back or forward button in a web browser. CWE-20
 Improper Input Validation 
CVE-2007-6763 2024-11-21 09:40 2019-08-1 Show GitHub Exploit DB Packet Storm
313273 9.8 CRITICAL
Network
linux linux_kernel In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6762 2024-11-21 09:40 2019-07-28 Show GitHub Exploit DB Packet Storm
313274 7.8 HIGH
Local
linux linux_kernel drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trigger an incorrect count value and videobu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6761 2024-11-21 09:40 2017-04-24 Show GitHub Exploit DB Packet Storm
313275 9.8 CRITICAL
Network
dataprobe ibootbar_firmware Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie. CWE-287
Improper Authentication
CVE-2007-6760 2024-11-21 09:40 2017-04-8 Show GitHub Exploit DB Packet Storm
313276 9.8 CRITICAL
Network
dataprobe ibootbar_firmware Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie. CWE-287
Improper Authentication
CVE-2007-6759 2024-11-21 09:40 2017-04-8 Show GitHub Exploit DB Packet Storm
313277 - gehealthcare centricity_dms_firmware GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is de… CWE-255
Credentials Management
CVE-2007-6757 2024-11-21 09:40 2015-08-4 Show GitHub Exploit DB Packet Storm
313278 - zoll monitor\/defibrillator ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attackers to modify device configuration and cau… CWE-255
Credentials Management
CVE-2007-6756 2024-11-21 09:40 2014-08-13 Show GitHub Exploit DB Packet Storm
313279 - dell bsafe_crypto-c-micro-edition
bsafe_crypto-j
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skele… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2007-6755 2024-11-21 09:40 2013-10-12 Show GitHub Exploit DB Packet Storm
313280 - canonical telepathy-idle
ubuntu_linux
telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of t… CWE-20
 Improper Input Validation 
CVE-2007-6746 2024-11-21 09:40 2013-05-22 Show GitHub Exploit DB Packet Storm