Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189081 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における重要なデータを漏えいされる脆弱性 CWE-119
バッファエラー 		CVE-2017-16364 2017-12-21 12:04 2017-11-14 Show GitHub Exploit DB Packet Storm
189082 8.8 重要
Network 		アドビシステムズ - Adobe Reader および Acrobat におけるバッファオーバーリードの脆弱性 CWE-119
バッファエラー 		CVE-2017-16363 2017-12-21 12:04 2017-11-14 Show GitHub Exploit DB Packet Storm
189083 6.5 警告
Network 		アドビシステムズ - Adobe Reader および Acrobat における JavaScript API 内のスタックを枯渇状態にされる脆弱性 CWE-399
リソース管理の問題 		CVE-2017-16419 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
189084 8.8 重要
Network 		アドビシステムズ - Adobe Reader および Acrobat における重要な情報を漏えいされる脆弱性 CWE-125
境界外読み取り 		CVE-2017-16418 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
189085 8.8 重要
Network 		アドビシステムズ - Adobe Reader および Acrobat における重要な情報を漏えいされる脆弱性 CWE-787
境界外書き込み 		CVE-2017-16417 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
189086 8.8 重要
Network 		アドビシステムズ - Adobe Reader および Acrobat における重要なデータを破壊される脆弱性 CWE-787
境界外書き込み 		CVE-2017-16416 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
189087 9.8 緊急
Network 		アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2017-16398 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
189088 8.8 重要
Network 		アドビシステムズ - Adobe Reader および Acrobat における重要な情報を漏えいされる脆弱性 CWE-125
境界外読み取り 		CVE-2017-16397 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
189089 8.8 重要
Network 		アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2017-16396 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
189090 8.8 重要
Network 		アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2017-16395 2017-12-20 20:44 2017-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 9.4 CRITICAL
Network 		- - Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter t… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-49973 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
62 7.1 HIGH
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.0.14, cross-site GET request can trigger stored cron commands on… New CWE-352
 Origin Validation Error 		CVE-2026-49396 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
63 7.7 HIGH
Network 		- - Koel is a free, open-source music streaming solution. Prior to version 9.3.5, Koel validates the podcast feed URL via the SafeUrl rule (DNS resolution + public IP check), but the individual episode <… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-47260 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
64 6.5 MEDIUM
Network 		- - ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of authorization. They can… New CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2026-47238 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
65 5.4 MEDIUM
Network 		- - NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot (AVB) v… New CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2026-47223 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
66 - - - Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to before 3.21.6 and 4.0… New CWE-284
CWE-288
Improper Access Control
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-47200 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
67 - - - Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, a moderator with the relevant Discord permission bit can use the bot to moderate users above them in the Discord role hierarchy, as lon… New CWE-862
 Missing Authorization 		CVE-2026-47197 2026-06-13 13:17 2026-06-12 Show GitHub Exploit DB Packet Storm
68 - - - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The diagnostics_channel, … New CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2026-47141 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
69 10.0 CRITICAL
Network 		- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookupSetter__, Buffer, "__proto_… New CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-47131 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm
70 7.7 HIGH
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, nezha's dashboard supports two user roles: RoleAdmin (Role=… New CWE-863
CWE-918
 Incorrect Authorization
Server-Side Request Forgery (SSRF)  		CVE-2026-46717 2026-06-13 13:17 2026-06-13 Show GitHub Exploit DB Packet Storm