Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196701 3.3 低
Local 		Firejail project - Firejail における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-10118 2017-05-15 18:13 2016-01-25 Show GitHub Exploit DB Packet Storm
196702 7.8 重要
Local 		Firejail project - Firejail における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-10117 2017-05-15 18:13 2016-01-25 Show GitHub Exploit DB Packet Storm
196703 7.2 重要
Network 		EyesOfNetwork - EyesOfNetwork における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-6088 2017-05-15 18:12 2017-03-23 Show GitHub Exploit DB Packet Storm
196704 8.8 重要
Network 		サムスン - Samsung Galaxy S6 の SecEmailUI における任意の JavaScript を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-7893 2017-05-15 18:03 2015-07-29 Show GitHub Exploit DB Packet Storm
196705 9.8 緊急
Network 		BigTree CMS - BigTree CMS におけるセーフティチェックを回避される脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2017-7695 2017-05-15 17:39 2017-04-8 Show GitHub Exploit DB Packet Storm
196706 9.8 緊急
Network 		Amazon.com, Inc. - Amazon Fire OS の drivers/staging/havok/havok.c の havok_write 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-7292 2017-05-15 17:22 2015-09-7 Show GitHub Exploit DB Packet Storm
196707 5.5 警告
Local 		OpenCV team - OpenCV におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1517 2017-05-15 17:22 2016-01-13 Show GitHub Exploit DB Packet Storm
196708 7.8 重要
Local 		OpenCV team - OpenCV におけるメモリ二重解放の脆弱性 CWE-415
二重解放 		CVE-2016-1516 2017-05-15 17:22 2016-01-13 Show GitHub Exploit DB Packet Storm
196709 4.3 警告
Network 		Atlassian - Atlassian Bitbucket Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-4320 2017-05-15 16:55 2016-06-6 Show GitHub Exploit DB Packet Storm
196710 8.8 重要
Network 		Atlassian - Atlassian JIRA Server の auditing/settings におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-4319 2017-05-15 16:55 2016-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2711 6.7 MEDIUM
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/conf.c allocates heap memory proportional to n_devices, a count derived from libxml2 XPath evalu… CWE-122
CWE-190
Heap-based Buffer Overflow
 Integer Overflow or Wraparound 		CVE-2026-48065 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2712 4.4 MEDIUM
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently ignores EACCES errors when opening /dev/input/event* nodes, causing pusb_has_vi… CWE-390
CWE-693
 Detection of Error Condition Without Action
 Protection Mechanism Failure 		CVE-2026-48792 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2713 4.6 MEDIUM
Physics 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return values of udisks_drive_get_serial(), udisks_drive_get_vendor(), and u… CWE-476
 NULL Pointer Dereference 		CVE-2026-44710 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2714 8.2 HIGH
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such as $(id>/tmp/rce) in the config causes root RCE when pamusb-conf --reset-pads is… CWE-78
CWE-88
OS Command 
Argument Injection 		CVE-2026-44712 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2715 8.8 HIGH
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the user's $TMUX environment variable, splits it on commas, and interpolates the so… CWE-78
CWE-116
OS Command 
 Improper Encoding or Escaping of Output 		CVE-2026-44713 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2716 7.4 HIGH
Network 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remote feature checks utmpx ut_addr_v6 to detect whether an authentication request o… CWE-284
Improper Access Control 		CVE-2026-47269 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2717 6.3 MEDIUM
Local 		- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM module loaded into the host process (sudo, login, GDM, GNOME Shell). Display manage… CWE-362
Race Condition 		CVE-2026-47270 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
2718 6.1 MEDIUM
Network 		apache echarts A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versions prior to 6.1.0,… CWE-79
Cross-site Scripting 		CVE-2026-45249 2026-05-28 22:48 2026-05-25 Show GitHub Exploit DB Packet Storm
2719 6.5 MEDIUM
Network 		apache shiro Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1… CWE-384
 Session Fixation 		CVE-2026-43827 2026-05-28 22:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2720 6.5 MEDIUM
Network 		apache shiro Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommen… CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute 		CVE-2026-43828 2026-05-28 22:45 2026-05-26 Show GitHub Exploit DB Packet Storm