Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200281 9.8 緊急
Network 		Facebook - Facebook HHVM の StringUtil::implode における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-6872 2017-03-7 16:43 2016-08-2 Show GitHub Exploit DB Packet Storm
200282 9.8 緊急
Network 		Facebook - Facebook HHVM の bcmath における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-6871 2017-03-7 16:43 2016-08-2 Show GitHub Exploit DB Packet Storm
200283 9.8 緊急
Network 		Facebook - Facebook HHVM の複数の関数における境界外書き込みの脆弱性 CWE-787
境界外書き込み 		CVE-2016-6870 2017-03-7 16:43 2016-07-2 Show GitHub Exploit DB Packet Storm
200284 7.5 重要
Network 		WSO2 - WSO2 Identity Server の XACML フロー機能における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2016-4312 2017-03-7 16:17 2016-08-12 Show GitHub Exploit DB Packet Storm
200285 8.8 重要
Network 		WSO2 - WSO2 Identity Server の XACML フロー機能におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-4311 2017-03-7 16:17 2016-08-12 Show GitHub Exploit DB Packet Storm
200286 9.8 緊急
Network 		Zend Technologies Ltd.
Fedora Project		 - Zend Framework の Zend_Db_Select の order および group メソッドにおける SQL インジェクション攻撃を実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2016-6233 2017-03-7 15:36 2016-07-13 Show GitHub Exploit DB Packet Storm
200287 5.9 警告
Network 		Timo Sirainen - Dovecot の auth コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-8652 2017-03-7 15:29 2016-12-3 Show GitHub Exploit DB Packet Storm
200288 6.1 警告
Network 		Kabona AB - Kabona AB WebDatorCentral (WDC) アプリケーションにおける脆弱性 CWE-601
オープンリダイレクト 		CVE-2016-8376 2017-03-7 15:18 2016-10-13 Show GitHub Exploit DB Packet Storm
200289 8.2 重要
Network 		Kabona AB - Kabona AB WebDatorCentral (WDC) アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-8356 2017-03-7 15:18 2016-10-13 Show GitHub Exploit DB Packet Storm
200290 9.8 緊急
Network 		Algorithm - BINOM3 Universal Multifunctional Electric Power Quality Meter における脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2017-5167 2017-03-7 15:15 2017-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 - - - Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized… New CWE-20
 Improper Input Validation  		CVE-2026-0412 2026-06-11 01:16 2026-06-10 Show GitHub Exploit DB Packet Storm
582 - - - Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality. New CWE-20
 Improper Input Validation  		CVE-2026-0410 2026-06-11 01:16 2026-06-10 Show GitHub Exploit DB Packet Storm
583 5.3 MEDIUM
Network 		google chrome Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from pr… New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-11669 2026-06-11 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
584 8.3 HIGH
Network 		google chrome Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… New CWE-787
 Out-of-bounds Write 		CVE-2026-11672 2026-06-11 01:15 2026-06-9 Show GitHub Exploit DB Packet Storm
585 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New CWE-79
Cross-site Scripting 		CVE-2026-47637 2026-06-11 01:14 2026-06-10 Show GitHub Exploit DB Packet Storm
586 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New CWE-79
Cross-site Scripting 		CVE-2026-47638 2026-06-11 01:07 2026-06-10 Show GitHub Exploit DB Packet Storm
587 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New CWE-79
Cross-site Scripting 		CVE-2026-47639 2026-06-11 01:06 2026-06-10 Show GitHub Exploit DB Packet Storm
588 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New CWE-79
Cross-site Scripting 		CVE-2026-47640 2026-06-11 01:01 2026-06-10 Show GitHub Exploit DB Packet Storm
589 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-47641 2026-06-11 00:59 2026-06-10 Show GitHub Exploit DB Packet Storm
590 8.3 HIGH
Network 		google chrome Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially per… New CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-11676 2026-06-11 00:32 2026-06-9 Show GitHub Exploit DB Packet Storm