Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199101 4.3 警告
Network
IBM - IBM Rhapsody DM における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2016-8973 2017-04-18 16:55 2016-10-25 Show GitHub Exploit DB Packet Storm
199102 6.8 警告
Physics
IBM - IBM Jazz Team Server の CLM アプリケーションにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2016-2981 2017-04-18 16:55 2016-03-9 Show GitHub Exploit DB Packet Storm
199103 4.3 警告
Network
IBM - IBM Algo One Algo Risk Application における別のユーザのレポートへのアクセス権を取得される脆弱性 CWE-200
情報漏えい
CVE-2017-1155 2017-04-18 16:55 2017-03-2 Show GitHub Exploit DB Packet Storm
199104 8.1 重要
Network
IBM - Trust Association Interceptor が設定された OpenID Connect を使用している IBM WebSphere Application Server における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-1151 2017-04-18 16:55 2017-03-10 Show GitHub Exploit DB Packet Storm
199105 5.4 警告
Network
IBM - IBM Content Navigator におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-1146 2017-04-18 16:55 2017-03-6 Show GitHub Exploit DB Packet Storm
199106 8.6 重要
Network
IBM - IBM WebSphere MQ におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-1145 2017-04-18 16:55 2017-03-3 Show GitHub Exploit DB Packet Storm
199107 7.8 重要
Local
IBM - IBM Power Hardware Management Console における root 権限取得のため権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-1134 2017-04-18 16:55 2017-03-2 Show GitHub Exploit DB Packet Storm
199108 5.5 警告
Local
Artifex Software - Artifex Software, Inc. の Ghostscript の mem_get_bits_rectangle 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-7207 2017-04-18 16:10 2017-03-20 Show GitHub Exploit DB Packet Storm
199109 7.8 重要
Local
Google - Android の Qualcomm SPCom ドライバにおけるカーネルのコンテキスト内で任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5857 2017-04-18 16:08 2016-06-28 Show GitHub Exploit DB Packet Storm
199110 7.5 重要
Network
Open Information Security Foundation - Suricata における不適切に実装されたセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック
CVE-2017-7177 2017-04-18 15:52 2017-02-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311 8.3 HIGH
Network
google chrome Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… New CWE-122
Heap-based Buffer Overflow
CVE-2026-12010 2026-06-13 02:19 2026-06-12 Show GitHub Exploit DB Packet Storm
312 8.3 HIGH
Network
google chrome Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a… New CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-12009 2026-06-13 02:18 2026-06-12 Show GitHub Exploit DB Packet Storm
313 8.8 HIGH
Network
- - Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management authorization when setting the scheme_admin flag on group … New CWE-863
 Incorrect Authorization
CVE-2026-7387 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
314 6.5 MEDIUM
Network
- - Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users with the {{manage_se… New CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-7184 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
315 7.6 HIGH
Network
- - Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sy… New CWE-22
Path Traversal
CVE-2026-6961 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
316 6.7 MEDIUM
Network
- - Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-level permission when patching protected default system roles, which allows aut… New CWE-863
 Incorrect Authorization
CVE-2026-6739 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
317 4.3 MEDIUM
Network
- - Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creati… New CWE-862
 Missing Authorization
CVE-2026-6689 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
318 5.3 MEDIUM
Network
- - Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to validate that a username returned during bot registration belongs to a bot account, which allo… New CWE-200
Information Exposure
CVE-2026-6046 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
319 9.1 CRITICAL
Network
- - Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-cod… New CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-50091 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
320 9.3 CRITICAL
Network
- - The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper… New CWE-1289
 Improper Validation of Unsafe Equivalence in Input
CVE-2026-50090 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm