Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
791	6.1	警告 Network	Apache Software Foundation	Echarts	Apache Software FoundationのEchartsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45249	2026-06-3 15:38	2026-05-25	Show	GitHub Exploit DB Packet Storm

792	5.5	警告 Local	Libusb	Libusb	Libusbにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-47104	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

793	7.8	重要 Local	レッドハット openSUSE	Red Hat Hardened Images Red Hat Satellite Red Hat Update Infrastructure Red Hat OpenShift Container Platform libsolv Red&nbs…	openSUSE等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-48864	2026-06-3 15:38	2026-05-26	Show	GitHub Exploit DB Packet Storm

794	7.5	重要 Network	Jenkins プロジェクト	Pipeline: Groovy Libraries	JenkinsのPipeline: Groovy Librariesにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-48921	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

795	4.3	警告 Network	Kostyasha	Github Integration	KostyashaのGithub Integrationにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-48925	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

796	5.5	警告 Network	Jenkins プロジェクト	buildgraph-view	Jenkinsのbuildgraph-viewにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-48927	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

797	6.5	警告 Network	IBM	IBM i	IBMのIBM Iにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-6936	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

798	2.7	低 Network	Synology Inc.	Surveillance Station	Synology Inc.のSurveillance Stationにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2024-47267	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

799	4.9	警告 Network	Synology Inc.	Surveillance Station	Synology Inc.のSurveillance Stationにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-47268	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

800	4.9	警告 Network	Synology Inc.	Surveillance Station	Synology Inc.のSurveillance Stationにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2024-47269	2026-06-3 15:37	2026-05-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345051	-	sgi	performance_co-pilot	The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).	NVD-CWE-Other	CVE-2001-0823	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345052	-	caucho_technology	resin	A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error messa…	NVD-CWE-Other	CVE-2001-0828	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345053	-	htdig conectiva debian suse	htdig linux debian_linux suse_linux	htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of servic…	NVD-CWE-Other	CVE-2001-0834	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345054	-	oracle	application_server_web_cache	Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.	NVD-CWE-Other	CVE-2001-0836	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345055	-	deltathree	pc-to-phone	DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, an…	NVD-CWE-Other	CVE-2001-0837	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345056	-	squid	squid_web_proxy	Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.	NVD-CWE-Other	CVE-2001-0843	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345057	-	lotus	domino	Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).	NVD-CWE-Other	CVE-2001-0846	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345058	-	caldera	openlinux	A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a …	NVD-CWE-Other	CVE-2001-0850	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345059	-	caldera linux suse	openlinux_server openlinux_workstation openlinux openlinux_edesktop openlinux_eserver linux_kernel suse_linux	Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.	NVD-CWE-Other	CVE-2001-0851	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

345060	-	imp	webmail	Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message par…	NVD-CWE-Other	CVE-2001-0857	2017-10-10 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed