Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189911 8.8 重要
Network
Claydip - Claydip Laravel Airbnb Clone における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2017-14704 2017-10-23 16:33 2017-09-22 Show GitHub Exploit DB Packet Storm
189912 3.1
Network
Fedora Project
wesnoth
- Battle for Wesnoth における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2015-5070 2017-10-23 16:23 2015-06-29 Show GitHub Exploit DB Packet Storm
189913 4.3 警告
Network
Fedora Project
wesnoth
- Battle for Wesnoth における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2015-5069 2017-10-23 16:23 2015-06-29 Show GitHub Exploit DB Packet Storm
189914 6.1 警告
Network
レッドハット - RHMAP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-7554 2017-10-23 16:06 2017-08-20 Show GitHub Exploit DB Packet Storm
189915 6.3 警告
Network
レッドハット - App Studio におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2017-7553 2017-10-23 16:06 2017-09-18 Show GitHub Exploit DB Packet Storm
189916 9.8 緊急
Network
レッドハット - millicore におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-7552 2017-10-23 16:06 2017-09-18 Show GitHub Exploit DB Packet Storm
189917 7.3 重要
Network
Apache Software Foundation - A-MQ におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2015-5184 2017-10-23 14:57 2015-07-31 Show GitHub Exploit DB Packet Storm
189918 6.3 警告
Network
Apache Software Foundation - A-MQ におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2015-5183 2017-10-23 14:57 2015-07-31 Show GitHub Exploit DB Packet Storm
189919 8.8 重要
Network
Apache Software Foundation - A-MQ におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-5182 2017-10-23 14:57 2015-07-30 Show GitHub Exploit DB Packet Storm
189920 5.4 警告
Network
レッドハット - A-MQ の JBoss コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5181 2017-10-23 14:57 2015-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 7.8 HIGH
Local
google android In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege w… New CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-0096 2026-06-3 03:05 2026-06-2 Show GitHub Exploit DB Packet Storm
42 8.0 HIGH
Adjacent
google android In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation of privilege with no… New CWE-693
 Protection Mechanism Failure
CVE-2026-0097 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
43 7.8 HIGH
Local
google android In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional ex… New CWE-441
Confused Deputy
CVE-2026-0098 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
44 7.8 HIGH
Local
google android In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege wit… New CWE-273
 Improper Check for Dropped Privileges
CVE-2026-0099 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
45 7.8 HIGH
Local
google android In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User… New CWE-122
Heap-based Buffer Overflow
CVE-2026-0100 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
46 5.5 MEDIUM
Local
google android In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service with no additional e… New CWE-20
 Improper Input Validation 
CVE-2026-28578 2026-06-3 03:03 2026-06-2 Show GitHub Exploit DB Packet Storm
47 7.8 HIGH
Local
google android In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use… New CWE-120
Classic Buffer Overflow
CVE-2026-28580 2026-06-3 03:03 2026-06-2 Show GitHub Exploit DB Packet Storm
48 4.0 MEDIUM
Local
google android In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with null execution privileg… New CWE-476
 NULL Pointer Dereference
CVE-2026-28581 2026-06-3 03:03 2026-06-2 Show GitHub Exploit DB Packet Storm
49 3.3 LOW
Local
google android In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution pri… New CWE-269
 Improper Privilege Management
CVE-2026-28586 2026-06-3 03:02 2026-06-2 Show GitHub Exploit DB Packet Storm
50 6.5 MEDIUM
Adjacent
qualcomm fastconnect_7800_firmware
qca7005_firmware
snapdragon_ar1_gen_1_platform_firmware
wcd9380_firmware
wcd9385_firmware
wsa8830_firmware
wsa8832_firmware
wsa8835_firmware
Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration. New CWE-1230
 Exposure of Sensitive Information Through Metadata
CVE-2025-59601 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm