Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196311 7.5 重要
Network 		サムスン - Samsung S6 edge 上で稼働する WifiHs20UtilityService におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-7888 2017-07-4 17:24 2015-10-29 Show GitHub Exploit DB Packet Storm
196312 7.8 重要
Local 		Advanced Micro Devices (AMD) - AMD fglrx-driver における権限を取得される脆弱性 CWE-59
リンク解釈の問題 		CVE-2015-7724 2017-07-4 17:24 2015-10-19 Show GitHub Exploit DB Packet Storm
196313 7.8 重要
Local 		Advanced Micro Devices (AMD) - AMD fglrx-driver における権限を取得される脆弱性 CWE-59
リンク解釈の問題 		CVE-2015-7723 2017-07-4 17:24 2015-10-19 Show GitHub Exploit DB Packet Storm
196314 6.1 警告
Network 		cgiirc - CGI:IRC の irc.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-8920 2017-07-4 17:13 2017-06-6 Show GitHub Exploit DB Packet Storm
196315 7.5 重要
Network 		Personify Inc. - Personify360 eBusiness における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2017-7314 2017-07-4 16:57 2017-06-6 Show GitHub Exploit DB Packet Storm
196316 7.5 重要
Network 		Personify Inc. - Personify360 eBusiness における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-7313 2017-07-4 16:57 2017-06-6 Show GitHub Exploit DB Packet Storm
196317 9.8 緊急
Network 		Personify Inc. - Personify360 eBusiness におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-7312 2017-07-4 16:57 2017-06-6 Show GitHub Exploit DB Packet Storm
196318 6.1 警告
Network 		ソフォス - Sophos Cyberoam ファームウェアのファイアウォールデバイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9834 2017-07-4 16:57 2016-12-5 Show GitHub Exploit DB Packet Storm
196319 9.8 緊急
Network 		VMware - VMware vSphere Data Protection における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-4917 2017-07-4 16:50 2017-06-6 Show GitHub Exploit DB Packet Storm
196320 9.8 緊急
Network 		VMware - VMware vSphere Data Protection における信頼性のないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2017-4914 2017-07-4 16:50 2017-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3621 8.3 HIGH
Network 		google chrome Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr… CWE-416
 Use After Free 		CVE-2026-9905 2026-06-2 03:43 2026-05-29 Show GitHub Exploit DB Packet Storm
3622 4.3 MEDIUM
Network 		google chrome Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) CWE-125
Out-of-bounds Read 		CVE-2026-9943 2026-06-2 03:43 2026-05-29 Show GitHub Exploit DB Packet Storm
3623 8.8 HIGH
Network 		- - LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but… CWE-787
 Out-of-bounds Write 		CVE-2026-44988 2026-06-2 03:42 2026-05-28 Show GitHub Exploit DB Packet Storm
3624 8.1 HIGH
Network 		sangoma freepbx FreePBX is an open source IP PBX. Prior to 17.0.8, the FreePBX api module's OAuth2 implementation does not sufficiently validate client credentials during token issuance. Knowledge of a valid client_… CWE-1390
 Weak Authentication 		CVE-2026-44237 2026-06-2 03:42 2026-05-29 Show GitHub Exploit DB Packet Storm
3625 8.8 HIGH
Network 		sangoma freepbx FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administrati… CWE-89
SQL Injection 		CVE-2026-44238 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3626 8.8 HIGH
Network 		sangoma freepbx FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without path sanitization. The $_REQUEST[… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2026-44239 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3627 9.8 CRITICAL
Network 		- - Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search APIs interpolated the user-supplied regConfig parameter directly into the generate… CWE-89
SQL Injection 		CVE-2026-45288 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3628 7.3 HIGH
Network 		- - Better Auth is an authentication and authorization library for TypeScript. Prior to 1.4.17 and 1.5.0-beta.9, Better Auth's HTTP rate limiter keyed each request by the exact textual IP address it rece… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-45364 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3629 4.7 MEDIUM
Network 		- - typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary inconsistency bet… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45366 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3630 8.8 HIGH
Network 		wwbn avideo WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a classic shell-metacharacter injection. The YPTSocket notification branch in plugin/Live/on_publish.php builds an execAsyn… CWE-78
OS Command  		CVE-2026-45578 2026-06-2 03:41 2026-05-29 Show GitHub Exploit DB Packet Storm