Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
461	9.1	緊急 Network	QNAP Systems	File Station 5	QNAP SystemsのFile Station 5におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-26240	2026-06-15 11:19	2026-06-10	Show	GitHub Exploit DB Packet Storm

462	9.1	緊急 Network	QNAP Systems	File Station 5	QNAP SystemsのFile Station 5におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-26241	2026-06-15 11:19	2026-06-10	Show	GitHub Exploit DB Packet Storm

463	9.8	緊急 Network	オラクル	PeopleSoft Enterprise PeopleTools	オラクルのPeopleSoft Enterprise PeopleToolsにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35273	2026-06-15 11:19	2026-06-11	Show	GitHub Exploit DB Packet Storm

464	7.5	重要 Network	VMware	Spring Security	VMwareのSpring Securityにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40988	2026-06-15 11:18	2026-06-10	Show	GitHub Exploit DB Packet Storm

465	5.4	警告 Network	VMware	Spring Security	VMwareのSpring Securityにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41003	2026-06-15 11:18	2026-06-10	Show	GitHub Exploit DB Packet Storm

466	6.1	警告 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41539	2026-06-15 11:18	2026-06-9	Show	GitHub Exploit DB Packet Storm

467	5.3	警告 Network	VMware	Spring Security	VMwareのSpring Securityにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-41694	2026-06-15 11:18	2026-06-10	Show	GitHub Exploit DB Packet Storm

468	9.8	緊急 Network	VMware	spring for graphql	VMwareのspring for graphqlにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41699	2026-06-15 11:18	2026-06-11	Show	GitHub Exploit DB Packet Storm

469	8.1	重要 Network	VMware	spring for graphql	VMwareのspring for graphqlにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41700	2026-06-15 11:18	2026-06-11	Show	GitHub Exploit DB Packet Storm

470	7.5	重要 Network	VMware	spring for graphql	VMwareのspring for graphqlにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-41856	2026-06-15 11:18	2026-06-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256171	9.8	CRITICAL Network	alienvault nfsen	ossim unified_security_management nfsen	AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulne…	CWE-273 Improper Check for Dropped Privileges	CVE-2017-6972	2024-11-21 12:30	2017-03-23	Show	GitHub Exploit DB Packet Storm

256172	8.8	HIGH Network	alienvault nfsen	ossim unified_security_management nfsen	AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving t…	CWE-74 Injection	CVE-2017-6971	2024-11-21 12:30	2017-03-22	Show	GitHub Exploit DB Packet Storm

256173	8.4	HIGH Local	alienvault nfsen	ossim unified_security_management nfsen	AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.	CWE-78 OS Command	CVE-2017-6970	2024-11-21 12:30	2017-03-22	Show	GitHub Exploit DB Packet Storm

256174	5.5	MEDIUM Local	audiofile	audiofile	Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.	CWE-190 Integer Overflow or Wraparound	CVE-2017-6839	2024-11-21 12:30	2017-03-21	Show	GitHub Exploit DB Packet Storm

256175	5.5	MEDIUM Local	audiofile	audiofile	Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.	CWE-190 Integer Overflow or Wraparound	CVE-2017-6838	2024-11-21 12:30	2017-03-21	Show	GitHub Exploit DB Packet Storm

256176	5.5	MEDIUM Local	audiofile	audiofile	WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.	CWE-20 Improper Input Validation	CVE-2017-6837	2024-11-21 12:30	2017-03-21	Show	GitHub Exploit DB Packet Storm

256177	5.5	MEDIUM Local	audiofile debian	audiofile debian_linux	Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows re…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6836	2024-11-21 12:30	2017-03-21	Show	GitHub Exploit DB Packet Storm

256178	5.5	MEDIUM Local	audiofile	audiofile	The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a craf…	CWE-369 Divide By Zero	CVE-2017-6835	2024-11-21 12:30	2017-03-21	Show	GitHub Exploit DB Packet Storm

256179	5.5	MEDIUM Local	audiofile debian	audiofile debian_linux	Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6834	2024-11-21 12:30	2017-03-21	Show	GitHub Exploit DB Packet Storm

256180	5.5	MEDIUM Local	audiofile	audiofile	The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a cra…	CWE-369 Divide By Zero	CVE-2017-6833	2024-11-21 12:30	2017-03-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed