Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199341	7.8	重要 Local	Google	-	メディアサーバにおけるリモートでコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-0407	2017-02-24 09:48	2017-02-6	Show	GitHub Exploit DB Packet Storm

199342	7.8	重要 Local	Google	-	メディアサーバにおけるリモートでコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-0406	2017-02-24 09:48	2017-02-6	Show	GitHub Exploit DB Packet Storm

199343	7.8	重要 Local	Google	-	Surfaceflinger におけるリモートでコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-0405	2017-02-24 09:48	2017-02-6	Show	GitHub Exploit DB Packet Storm

199344	7	重要 Local	Google Linux	-	Qualcomm サウンドドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8481	2017-02-23 18:24	2016-10-1	Show	GitHub Exploit DB Packet Storm

199345	7	重要 Local	Google Linux	-	Qualcomm Secure Execution Environment Communicator ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8480	2017-02-23 18:24	2016-09-28	Show	GitHub Exploit DB Packet Storm

199346	7	重要 Local	Google Linux	-	Qualcomm Wi-Fi ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8476	2017-02-23 18:24	2016-11-14	Show	GitHub Exploit DB Packet Storm

199347	7	重要 Local	Google Linux	-	Qualcomm Wi-Fi ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8421	2017-02-23 18:24	2016-10-26	Show	GitHub Exploit DB Packet Storm

199348	7	重要 Local	Google Linux	-	Qualcomm Wi-Fi ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8420	2017-02-23 18:24	2016-10-26	Show	GitHub Exploit DB Packet Storm

199349	7	重要 Local	Google Linux	-	Qualcomm Wi-Fi ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8419	2017-02-23 18:23	2016-10-26	Show	GitHub Exploit DB Packet Storm

199350	9.8	緊急 Network	Google	-	Qualcomm crypto ドライバにおけるリモートでコードを実行される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8418	2017-02-23 18:23	2016-10-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3131	7.8	HIGH Local	trendmicro	apex_one	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to …	CWE-346 Origin Validation Error	CVE-2026-34927	2026-05-22 22:31	2026-05-21	Show	GitHub Exploit DB Packet Storm

3132	6.7	MEDIUM Local	trendmicro	apex_one	A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents…	CWE-23 Relative Path Traversal	CVE-2026-34926	2026-05-22 21:47	2026-05-21	Show	GitHub Exploit DB Packet Storm

3133	9.8	CRITICAL Network	apache	fory	Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration and global-name resol…	CWE-502 Deserialization of Untrusted Data	CVE-2026-48207	2026-05-22 21:40	2026-05-22	Show	GitHub Exploit DB Packet Storm

3134	-		-	-	STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authen…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2026-25608	2026-05-22 19:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

3135	-		-	-	Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version…	CWE-261 Weak Encoding for Password	CVE-2026-25607	2026-05-22 19:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

3136	-		-	-	A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated …	CWE-89 SQL Injection	CVE-2026-25606	2026-05-22 19:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

3137	7.5	HIGH Network	-	-	The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to the plugin not properly…	CWE-862 Missing Authorization	CVE-2026-9011	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

3138	4.3	MEDIUM Network	-	-	The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.1. This is due …	CWE-862 Missing Authorization	CVE-2026-8692	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

3139	5.3	MEDIUM Network	-	-	The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1. This is due to the plugin not properly verifying that a user is aut…	CWE-862 Missing Authorization	CVE-2026-8684	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

3140	7.5	HIGH Network	-	-	The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handle_playlist_endpoint() function (hooked to temp…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-8679	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm