Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199641 8.8 重要
Network
Roundcube.net - Roundcube の Password プラグインの DBMail ドライバにおける任意のコマンドを実行される脆弱性 CWE-74
インジェクション
CVE-2015-2180 2017-02-13 16:36 2015-02-5 Show GitHub Exploit DB Packet Storm
199642 8.8 重要
Network
s9y - Serendipity の include/functions_entries.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5609 2017-02-13 16:11 2017-01-26 Show GitHub Exploit DB Packet Storm
199643 6.1 警告
Network
Piwigo - Piwigo の画像アップロード機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5608 2017-02-13 16:11 2017-01-27 Show GitHub Exploit DB Packet Storm
199644 5.5 警告
Local
docker2aci project - docker2aci におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-7569 2017-02-13 16:11 2016-10-25 Show GitHub Exploit DB Packet Storm
199645 6.1 警告
Network
MyBB Group - MyBB および Merge System の Admin コントロールパネルの Users モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9421 2017-02-13 15:32 2016-10-17 Show GitHub Exploit DB Packet Storm
199646 9.8 緊急
Network
MyBB Group - MyBB および Merge System における脆弱性 CWE-20
不適切な入力確認
CVE-2016-9420 2017-02-13 15:32 2016-10-17 Show GitHub Exploit DB Packet Storm
199647 6.1 警告
Network
MyBB Group - MyBB および Merge System の Admin コントロールパネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9419 2017-02-13 15:32 2016-10-17 Show GitHub Exploit DB Packet Storm
199648 7.5 重要
Network
MyBB Group - Windows 上で稼動する MyBB および Merge System における ACP バックアップから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-9418 2017-02-13 15:32 2016-10-17 Show GitHub Exploit DB Packet Storm
199649 7.4 重要
Network
MyBB Group - MyBB および Merge System の fetch_remote_file 関数におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2016-9417 2017-02-13 15:32 2016-10-17 Show GitHub Exploit DB Packet Storm
199650 9.8 緊急
Network
MyBB Group - MyBB および Merge System のユーザデータハンドラにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9416 2017-02-13 15:32 2016-10-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 7.8 HIGH
Local
google android In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local escalation of privilege with no additional … New CWE-693
 Protection Mechanism Failure
CVE-2025-48652 2026-06-3 03:59 2026-06-2 Show GitHub Exploit DB Packet Storm
2 5.5 MEDIUM
Local
google android In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges need… New CWE-400
 Uncontrolled Resource Consumption
CVE-2025-48648 2026-06-3 03:59 2026-06-2 Show GitHub Exploit DB Packet Storm
3 3.3 LOW
Local
google android In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclos… New NVD-CWE-noinfo
CVE-2025-48616 2026-06-3 03:58 2026-06-2 Show GitHub Exploit DB Packet Storm
4 7.8 HIGH
Local
google android In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to local escalation of privilege with no ad… New CWE-441
Confused Deputy
CVE-2025-48570 2026-06-3 03:58 2026-06-2 Show GitHub Exploit DB Packet Storm
5 5.9 MEDIUM
Local
google android In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This c… New CWE-862
 Missing Authorization
CVE-2025-26418 2026-06-3 03:58 2026-06-2 Show GitHub Exploit DB Packet Storm
6 5.9 MEDIUM
Local
google android In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escalation of privilege with no additional exe… New CWE-284
Improper Access Control
CVE-2025-22426 2026-06-3 03:57 2026-06-2 Show GitHub Exploit DB Packet Storm
7 7.8 HIGH
Local
google android In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges… New NVD-CWE-noinfo
CVE-2025-22424 2026-06-3 03:57 2026-06-2 Show GitHub Exploit DB Packet Storm
8 7.8 HIGH
Local
google android In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede… New NVD-CWE-noinfo
CVE-2025-32348 2026-06-3 03:50 2026-06-2 Show GitHub Exploit DB Packet Storm
9 6.5 MEDIUM
Network
apache airflow A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g. `/etc/passwd` or `airflow.cfg… New CWE-59
Link Following
CVE-2026-40861 2026-06-3 03:49 2026-06-1 Show GitHub Exploit DB Packet Storm
10 7.2 HIGH
Network
apache airflow A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the `is_safe_url` check, enabling redirection from a trusted Airflow domain to an attacker-… New CWE-601
Open Redirect
CVE-2026-40961 2026-06-3 03:49 2026-06-1 Show GitHub Exploit DB Packet Storm