Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191421 3.3 低
Local 		レッドハット - Red Hat OpenShift の selinux-policy パッケージにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2015-0238 2017-10-23 17:23 2015-01-22 Show GitHub Exploit DB Packet Storm
191422 5.3 警告
Network 		Dropbox - Android 用 Dropbox SDK における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2014-8889 2017-10-23 17:23 2014-11-14 Show GitHub Exploit DB Packet Storm
191423 5.9 警告
Network 		Elasticsearch - Elastic Cloud Enterprise における暗号に関する脆弱性 CWE-310
暗号の問題 		CVE-2017-8444 2017-10-23 17:21 2017-09-13 Show GitHub Exploit DB Packet Storm
191424 7.5 重要
Network 		Apache Software Foundation - Apache Mesos におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2017-7687 2017-10-23 17:21 2017-09-26 Show GitHub Exploit DB Packet Storm
191425 9.8 緊急
Network 		filerun - FileRun における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-14738 2017-10-23 17:19 2017-09-16 Show GitHub Exploit DB Packet Storm
191426 7.5 重要
Network 		Schneider Electric - Schneider Electric ClearSCADA におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-9962 2017-10-23 17:16 2017-09-21 Show GitHub Exploit DB Packet Storm
191427 7.8 重要
Local 		Schneider Electric - Schneider Electric GP Pro EX におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-9961 2017-10-23 17:16 2017-07-14 Show GitHub Exploit DB Packet Storm
191428 8.1 重要
Network 		Faleemi Technologies Ltd - Faleemi FSC-880 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-14743 2017-10-23 17:16 2017-09-25 Show GitHub Exploit DB Packet Storm
191429 8.8 重要
Network 		Digium - Digium Asterisk GUI における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2017-14001 2017-10-23 17:16 2017-09-21 Show GitHub Exploit DB Packet Storm
191430 5.9 警告
Network 		Zoho Corporation - Android 用 Zoho Site24x7 Mobile Network Poller アプリケーションにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2017-14582 2017-10-23 16:59 2017-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3001 6.5 MEDIUM
Network 		nextcloud nextcloud_server Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can access attachments of… CWE-284
NVD-CWE-noinfo
Improper Access Control 		CVE-2026-45282 2026-06-4 02:09 2026-06-2 Show GitHub Exploit DB Packet Storm
3002 7.5 HIGH
Network 		prefect prefect In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication mid… CWE-863
 Incorrect Authorization 		CVE-2026-3514 2026-06-4 02:08 2026-06-2 Show GitHub Exploit DB Packet Storm
3003 6.5 MEDIUM
Network 		lfprojects mlflow MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlfl… CWE-284
Improper Access Control 		CVE-2026-3198 2026-06-4 02:07 2026-06-2 Show GitHub Exploit DB Packet Storm
3004 4.3 MEDIUM
Network 		elabftw elabftw eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the … CWE-200
Information Exposure 		CVE-2026-28511 2026-06-4 02:06 2026-06-2 Show GitHub Exploit DB Packet Storm
3005 4.3 MEDIUM
Network 		nextcloud nextcloud_server Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, and 33.0.0 to before 33.0.1, the files_lock app did not properly validate the ow… CWE-287
Improper Authentication 		CVE-2026-45283 2026-06-4 02:02 2026-06-2 Show GitHub Exploit DB Packet Storm
3006 5.5 MEDIUM
Local 		google android In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no addition… CWE-20
 Improper Input Validation  		CVE-2026-0085 2026-06-4 02:02 2026-06-2 Show GitHub Exploit DB Packet Storm
3007 8.0 HIGH
Adjacent 		google android In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow. This could lead to local escalati… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-0095 2026-06-4 02:00 2026-06-2 Show GitHub Exploit DB Packet Storm
3008 7.8 HIGH
Local 		google android In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalat… CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-0094 2026-06-4 02:00 2026-06-2 Show GitHub Exploit DB Packet Storm
3009 7.8 HIGH
Local 		google android In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n… CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-0093 2026-06-4 02:00 2026-06-2 Show GitHub Exploit DB Packet Storm
3010 7.8 HIGH
Local 		google android In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with no additional execut… CWE-269
 Improper Privilege Management 		CVE-2026-0091 2026-06-4 01:59 2026-06-2 Show GitHub Exploit DB Packet Storm