Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
190181 5.4 警告
Network
tine20 - Tine 2.0 Community Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-14923 2017-10-19 17:45 2017-09-9 Show GitHub Exploit DB Packet Storm
190182 5.4 警告
Network
tine20 - Tine 2.0 Community Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-14922 2017-10-19 17:45 2017-09-9 Show GitHub Exploit DB Packet Storm
190183 5.4 警告
Network
tine20 - Tine 2.0 Community Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-14921 2017-10-19 17:45 2017-09-9 Show GitHub Exploit DB Packet Storm
190184 9.1 緊急
Network
libexif - libexif における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-7544 2017-10-19 17:43 2017-07-25 Show GitHub Exploit DB Packet Storm
190185 6.5 警告
Network
GNOME Project - GNOME Nautilus における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-14604 2017-10-19 17:42 2017-02-15 Show GitHub Exploit DB Packet Storm
190186 5.5 警告
Local
レッドハット - 複数のレッドハット製品で使用される Linux Kernel におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能
CVE-2015-7837 2017-10-19 17:42 2015-11-19 Show GitHub Exploit DB Packet Storm
190187 8.8 重要
Network
IPython development team
Fedora Project
- IPython におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-5607 2017-10-19 17:42 2015-07-8 Show GitHub Exploit DB Packet Storm
190188 5 警告
Adjacent
Mirion Technologies - 複数の Mirion Technologies 製品におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2017-9649 2017-10-19 17:27 2017-07-27 Show GitHub Exploit DB Packet Storm
190189 6.5 警告
Adjacent
Mirion Technologies - 複数の Mirion Technologies 製品における暗号強度に関する脆弱性 CWE-326
不適切な暗号強度
CVE-2017-9645 2017-10-19 17:27 2017-07-27 Show GitHub Exploit DB Packet Storm
190190 9.8 緊急
Network
CA Technologies - CA Identity Manager における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2017-9393 2017-10-19 17:26 2017-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1221 7.8 HIGH
Local
google android In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lead to local escalation of privilege with … CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-0088 2026-06-4 01:59 2026-06-2 Show GitHub Exploit DB Packet Storm
1222 7.8 HIGH
Local
google android In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of p… CWE-693
 Protection Mechanism Failure
CVE-2026-0087 2026-06-4 01:59 2026-06-2 Show GitHub Exploit DB Packet Storm
1223 6.8 MEDIUM
Local
google android In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execu… CWE-269
 Improper Privilege Management
CVE-2026-0086 2026-06-4 01:58 2026-06-2 Show GitHub Exploit DB Packet Storm
1224 6.5 MEDIUM
Network
google android In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution priv… CWE-190
 Integer Overflow or Wraparound
CVE-2026-0080 2026-06-4 01:58 2026-06-2 Show GitHub Exploit DB Packet Storm
1225 5.5 MEDIUM
Local
google android In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local denial of service with no additional executi… CWE-190
 Integer Overflow or Wraparound
CVE-2026-0079 2026-06-4 01:57 2026-06-2 Show GitHub Exploit DB Packet Storm
1226 7.8 HIGH
Local
google android In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional e… CWE-20
 Improper Input Validation 
CVE-2026-0078 2026-06-4 01:57 2026-06-2 Show GitHub Exploit DB Packet Storm
1227 9.8 CRITICAL
Network
gitlawb openclaude OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashToo… CWE-284
CWE-306
Improper Access Control
Missing Authentication for Critical Function
CVE-2026-42074 2026-06-4 01:54 2026-06-3 Show GitHub Exploit DB Packet Storm
1228 6.5 MEDIUM
Network
gitlawb openclaude OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the OpenClaude MCP authentication flow starts a temporary local HTTP serv… CWE-352
CWE-400
 Origin Validation Error
 Uncontrolled Resource Consumption
CVE-2026-42073 2026-06-4 01:54 2026-06-3 Show GitHub Exploit DB Packet Storm
1229 5.4 MEDIUM
Network
shopify react-router React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP `Location` header value can permit Cros… CWE-79
Cross-site Scripting
CVE-2026-33244 2026-06-4 01:54 2026-06-3 Show GitHub Exploit DB Packet Storm
1230 5.3 MEDIUM
Network
oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac… CWE-284
Improper Access Control
CVE-2026-46842 2026-06-4 01:53 2026-05-29 Show GitHub Exploit DB Packet Storm