Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189971 9.8 緊急
Network 		Apache Software Foundation - Apache HttpClient における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4366 2017-11-24 14:24 2013-10-2 Show GitHub Exploit DB Packet Storm
189972 9.8 緊急
Network 		Apache Software Foundation - Apache Hadoop における暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2012-4449 2017-11-24 14:24 2012-10-12 Show GitHub Exploit DB Packet Storm
189973 7.5 重要
Network 		NQ Mobile - Android 用 "NQ Contacts Backup & Restore" アプリケーションにおける鍵管理のエラーに関する脆弱性 CWE-320
鍵管理のエラー 		CVE-2017-15998 2017-11-24 13:43 2017-10-29 Show GitHub Exploit DB Packet Storm
189974 7.8 重要
Local 		NQ Mobile - Android 用 "NQ Contacts Backup & Restore" アプリケーションにおける鍵管理のエラーに関する脆弱性 CWE-320
鍵管理のエラー 		CVE-2017-15997 2017-11-24 13:43 2017-10-29 Show GitHub Exploit DB Packet Storm
189975 9.8 緊急
Network 		NQ Mobile - Android 用 "NQ Contacts Backup & Restore" アプリケーションにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-15999 2017-11-24 12:09 2017-10-29 Show GitHub Exploit DB Packet Storm
189976 9.8 緊急
Network 		Episerver - Ektron Content Management System におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2012-5358 2017-11-24 12:02 2012-10-26 Show GitHub Exploit DB Packet Storm
189977 9.8 緊急
Network 		Episerver - Ektron Content Management System におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2012-5357 2017-11-24 12:02 2012-10-26 Show GitHub Exploit DB Packet Storm
189978 6.1 警告
Adjacent 		シスコシステムズ - Cisco Wireless LAN Controller におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-12282 2017-11-24 11:57 2017-11-1 Show GitHub Exploit DB Packet Storm
189979 7.5 重要
Adjacent 		シスコシステムズ - 複数の Cisco Aironet アクセスポイントにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2017-12281 2017-11-24 11:57 2017-11-1 Show GitHub Exploit DB Packet Storm
189980 7.5 重要
Network 		シスコシステムズ - Cisco Wireless LAN Controller におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-12280 2017-11-24 11:57 2017-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
731 7.5 HIGH
Network 		- - Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain parameter of the fromNetToolGet function. This vulnerability allows… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-36783 2026-06-11 05:16 2026-06-10 Show GitHub Exploit DB Packet Storm
732 9.8 CRITICAL
Network 		- - An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code … New CWE-120
Classic Buffer Overflow 		CVE-2026-30141 2026-06-11 05:16 2026-06-10 Show GitHub Exploit DB Packet Storm
733 6.5 MEDIUM
Network 		- - An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) … New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-36724 2026-06-11 05:15 2026-06-10 Show GitHub Exploit DB Packet Storm
734 6.1 MEDIUM
Network 		- - A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafte… New CWE-79
Cross-site Scripting 		CVE-2026-36725 2026-06-11 05:15 2026-06-10 Show GitHub Exploit DB Packet Storm
735 5.4 MEDIUM
Network 		- - A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted pa… New CWE-79
Cross-site Scripting 		CVE-2026-36728 2026-06-11 05:15 2026-06-10 Show GitHub Exploit DB Packet Storm
736 - - - A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-6444 2026-06-11 05:13 2026-06-10 Show GitHub Exploit DB Packet Storm
737 - - - A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges. New CWE-939
 Improper Authorization in Handler for Custom URL Scheme 		CVE-2026-6445 2026-06-11 05:13 2026-06-10 Show GitHub Exploit DB Packet Storm
738 - - - CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an… New CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-11626 2026-06-11 05:13 2026-06-11 Show GitHub Exploit DB Packet Storm
739 7.8 HIGH
Local 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. New CWE-843
Type Confusion 		CVE-2026-45600 2026-06-11 05:03 2026-06-10 Show GitHub Exploit DB Packet Storm
740 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w… 		Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. New CWE-501
 Trust Boundary Violation 		CVE-2026-33828 2026-06-11 05:00 2026-06-10 Show GitHub Exploit DB Packet Storm