Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194921 5.5 警告
Local 		Google - Android の TrustZone における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2014-9951 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
194922 7.8 重要
Local 		Google - Android の TrustZone における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2014-9949 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
194923 7.8 重要
Local 		Google - Android の TrustZone における配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2014-9948 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
194924 5.5 警告
Local 		Google - Android の TrustZone における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2014-9947 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
194925 7.8 重要
Local 		Google - Android の TrustZone における認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2014-9945 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
194926 8.8 重要
Network 		Mercurial - Mercurial の "hg serve --stdio" における Python デバッガを起動される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-9462 2017-06-26 16:24 2017-04-18 Show GitHub Exploit DB Packet Storm
194927 7.8 重要
Local 		Lenovo - Lenovo Solution Center のバックエンドサービスプロセスにおけるシステム権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-1876 2017-06-26 16:06 2016-04-26 Show GitHub Exploit DB Packet Storm
194928 6.1 警告
Network 		Contiki プロジェクト - Contiki Operating System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-7296 2017-06-26 15:56 2017-05-28 Show GitHub Exploit DB Packet Storm
194929 7.5 重要
Network 		Contiki プロジェクト - Contiki Operating System における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2017-7295 2017-06-26 15:56 2017-05-28 Show GitHub Exploit DB Packet Storm
194930 6.1 警告
Network 		OpenVPN Technologies - OpenVPN Access Server の Web インターフェースにおける CRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2017-5868 2017-06-26 15:56 2017-05-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2811 4.4 MEDIUM
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently ignores EACCES errors when opening /dev/input/event* nodes, causing pusb_has_vi… CWE-390
CWE-693
 Detection of Error Condition Without Action
 Protection Mechanism Failure 		CVE-2026-48792 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2812 4.6 MEDIUM
Physics 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return values of udisks_drive_get_serial(), udisks_drive_get_vendor(), and u… CWE-476
 NULL Pointer Dereference 		CVE-2026-44710 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2813 8.2 HIGH
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such as $(id>/tmp/rce) in the config causes root RCE when pamusb-conf --reset-pads is… CWE-78
CWE-88
OS Command 
Argument Injection 		CVE-2026-44712 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2814 8.8 HIGH
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the user's $TMUX environment variable, splits it on commas, and interpolates the so… CWE-78
CWE-116
OS Command 
 Improper Encoding or Escaping of Output 		CVE-2026-44713 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2815 7.4 HIGH
Network 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remote feature checks utmpx ut_addr_v6 to detect whether an authentication request o… CWE-284
Improper Access Control 		CVE-2026-47269 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2816 6.3 MEDIUM
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM module loaded into the host process (sudo, login, GDM, GNOME Shell). Display manage… CWE-362
Race Condition 		CVE-2026-47270 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2817 6.1 MEDIUM
Network 		apache echarts A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versions prior to 6.1.0,… CWE-79
Cross-site Scripting 		CVE-2026-45249 2026-05-28 22:48 2026-05-25 Show GitHub Exploit DB Packet Storm
2818 6.5 MEDIUM
Network 		apache shiro Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1… CWE-384
 Session Fixation 		CVE-2026-43827 2026-05-28 22:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2819 6.5 MEDIUM
Network 		apache shiro Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommen… CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute 		CVE-2026-43828 2026-05-28 22:45 2026-05-26 Show GitHub Exploit DB Packet Storm
2820 4.3 MEDIUM
Network 		- - The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_… CWE-862
 Missing Authorization 		CVE-2026-4888 2026-05-28 22:45 2026-05-28 Show GitHub Exploit DB Packet Storm