Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196821 3.7 低
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Cloud Foundry Runtime cf-release などの製品におけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2015-3189 2017-06-26 19:00 2015-04-10 Show GitHub Exploit DB Packet Storm
196822 6.5 警告
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Pivotal Elastic Runtime および cf-release の Cloud Controller におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-1834 2017-06-26 19:00 2015-04-10 Show GitHub Exploit DB Packet Storm
196823 8.8 重要
Network 		PivotX - PivotX における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2017-8402 2017-06-26 18:15 2017-05-29 Show GitHub Exploit DB Packet Storm
196824 6.5 警告
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Pivotal Elastic Runtime および cf-release の Loggregator Traffic Controller エンドポイントにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2016-2165 2017-06-26 18:12 2016-03-23 Show GitHub Exploit DB Packet Storm
196825 6.1 警告
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Cloud Foundry などの製品の UAA OAuth 承認ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0781 2017-06-26 18:12 2016-03-23 Show GitHub Exploit DB Packet Storm
196826 7.5 重要
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Pivotal Elastic Runtime および cf-release におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2016-0780 2017-06-26 18:12 2016-03-23 Show GitHub Exploit DB Packet Storm
196827 8.8 重要
Network 		Cloud Foundry Foundation
Pivotal Software, Inc.		 - Cloud Foundry Runtime cf-release などの製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-3191 2017-06-26 18:12 2015-04-10 Show GitHub Exploit DB Packet Storm
196828 7 重要
Local 		Google - Android の TrustZone における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2016-10297 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
196829 7.8 重要
Local 		Google - Android の TrustZone における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2015-9007 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
196830 7.8 重要
Local 		Google - Android の TrustZone における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2015-9005 2017-06-26 17:35 2017-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3501 8.8 HIGH
Network 		vivotek fd8136_firmware A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an … CWE-120
Classic Buffer Overflow 		CVE-2026-30652 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
3502 6.3 MEDIUM
Network 		vivotek fd8136_firmware A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized n1… CWE-121
Stack-based Buffer Overflow 		CVE-2026-35716 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
3503 6.5 MEDIUM
Network 		vivotek fd8136_firmware A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted … CWE-22
Path Traversal 		CVE-2026-35718 2026-06-4 03:39 2026-06-3 Show GitHub Exploit DB Packet Storm
3504 9.9 CRITICAL
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc… CWE-400
CWE-284
 Uncontrolled Resource Consumption
Improper Access Control 		CVE-2026-46775 2026-06-4 03:35 2026-05-29 Show GitHub Exploit DB Packet Storm
3505 9.6 CRITICAL
Network 		jpettitt meshcore_card MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect … CWE-79
Cross-site Scripting 		CVE-2026-45323 2026-06-4 03:34 2026-05-29 Show GitHub Exploit DB Packet Storm
3506 4.3 MEDIUM
Network 		redhat build_of_keycloak A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit this flaw by accessing user-facing APIs, such as the account API or by requesting an OpenID Conne… CWE-863
 Incorrect Authorization 		CVE-2026-9791 2026-06-4 03:28 2026-05-28 Show GitHub Exploit DB Packet Storm
3507 7.5 HIGH
Network 		redhat build_of_keycloak A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing … CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-9793 2026-06-4 03:26 2026-05-28 Show GitHub Exploit DB Packet Storm
3508 7.5 HIGH
Adjacent 		tp-link tapo_l535e_firmware
tapo_p300_firmware
tapo_d100c_firmware 		TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase is transmitted in cleartext witho… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-34126 2026-06-4 03:18 2026-05-29 Show GitHub Exploit DB Packet Storm
3509 7.3 HIGH
Network 		- - A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injectio… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure 		CVE-2026-10221 2026-06-4 03:16 2026-06-1 Show GitHub Exploit DB Packet Storm
3510 8.8 HIGH
Adjacent 		tp-link archer_c64_firmware Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web … CWE-288
CWE-306
Authentication Bypass Using an Alternate Path or Channel
Missing Authentication for Critical Function 		CVE-2026-8697 2026-06-4 03:14 2026-05-29 Show GitHub Exploit DB Packet Storm