Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200081 7.8 重要
Local
Nagios Enterprises, LLC - Nagios における root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10089 2017-03-6 16:29 2016-12-30 Show GitHub Exploit DB Packet Storm
200082 7.5 重要
Network
FreeBSD - FreeBSD の telnetd サービスにおけるログインの引数を挿入される脆弱性 CWE-287
不適切な認証
CVE-2016-1888 2017-03-6 16:27 2016-12-6 Show GitHub Exploit DB Packet Storm
200083 7.8 重要
Local
FreeBSD - FreeBSD の Linux 互換レイヤの issetugid システムコールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1883 2017-03-6 16:27 2016-01-27 Show GitHub Exploit DB Packet Storm
200084 7.8 重要
Local
FreeBSD - FreeBSD のカーネルの Linux 互換レイヤにおけるカーネルメモリの一部を読み込まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1880 2017-03-6 16:27 2016-01-14 Show GitHub Exploit DB Packet Storm
200085 5.5 警告
Local
Artifex Software - MuPDF の fitz/pixmap.c の fz_subsample_pixmap 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-125
境界外読み取り
CVE-2017-5896 2017-03-6 15:58 2017-02-10 Show GitHub Exploit DB Packet Storm
200086 5.5 警告
Local
Artifex Software - MuPDF の pdf-object.c の pdf_to_num 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-8674 2017-03-6 15:58 2016-09-22 Show GitHub Exploit DB Packet Storm
200087 7.5 重要
Network
GNU Project
Fedora Project
- GNU ed の regex.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-5357 2017-03-6 15:43 2017-01-20 Show GitHub Exploit DB Packet Storm
200088 7.5 重要
Network
GNU Project - GNU C Library の libresolv の IPv6 ネームサーバ管理コードの the __res_vinit 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-5417 2017-03-6 15:43 2016-08-4 Show GitHub Exploit DB Packet Storm
200089 5.5 警告
Local
AutoTrace project - AutoTrace の output-pstoedit.c の pstoedit_suffix_table_init 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-787
境界外書き込み
CVE-2016-7392 2017-03-6 15:36 2016-09-12 Show GitHub Exploit DB Packet Storm
200090 8.2 重要
Local
Python Software Foundation - Openpyxl における XML 外部エンティティ攻撃を実行される脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2017-5992 2017-03-6 15:25 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3221 4.3 MEDIUM
Network
- - A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of the file htdocs/user/messaging.php. Such manipulation of the argument ID leads … CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-10154 2026-06-2 02:16 2026-05-31 Show GitHub Exploit DB Packet Storm
3222 3.8 LOW
Network
tfa_basic_plugins_project tfa_basic_plugins An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affects TFA Basic Plugins… CWE-267
 Privilege Defined With Unsafe Actions
CVE-2026-6816 2026-06-2 02:15 2026-05-29 Show GitHub Exploit DB Packet Storm
3223 8.8 HIGH
Network
apache activemq Incorrect Default Permissions vulnerability in Apache ActiveMQ. This issue affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. The default Jolokia authorization settings granted non-ad… CWE-276
Incorrect Default Permissions 
CVE-2026-49157 2026-06-2 02:09 2026-06-1 Show GitHub Exploit DB Packet Storm
3224 5.9 MEDIUM
Network
apache activemq
activemq_broker
Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Brokers that are configured with a network connector with syncDurabl… CWE-1230
 Exposure of Sensitive Information Through Metadata
CVE-2026-49270 2026-06-2 02:09 2026-06-1 Show GitHub Exploit DB Packet Storm
3225 8.8 HIGH
Network
apache activemq
activemq_broker
Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesized discovery wrapp… CWE-20
CWE-94
 Improper Input Validation 
Code Injection
CVE-2026-45505 2026-06-2 02:09 2026-06-1 Show GitHub Exploit DB Packet Storm
3226 6.5 MEDIUM
Network
apache airflow A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connect… CWE-200
Information Exposure
CVE-2026-45192 2026-06-2 02:08 2026-06-1 Show GitHub Exploit DB Packet Storm
3227 6.5 MEDIUM
Network
apache mina_sshd Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to … CWE-22
Path Traversal
CVE-2026-48827 2026-06-2 02:08 2026-06-1 Show GitHub Exploit DB Packet Storm
3228 9.1 CRITICAL
Network
- - The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without … CWE-620
 Unverified Password Change
CVE-2026-5386 2026-06-2 02:07 2026-05-30 Show GitHub Exploit DB Packet Storm
3229 8.4 HIGH
Network
- - A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can injec… CWE-79
Cross-site Scripting
CVE-2026-6824 2026-06-2 02:07 2026-05-30 Show GitHub Exploit DB Packet Storm
3230 9.8 CRITICAL
Network
- - Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials … CWE-798
 Use of Hard-coded Credentials
CVE-2026-7786 2026-06-2 02:07 2026-05-30 Show GitHub Exploit DB Packet Storm