Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200811 3.3
Local
アップル - Apple macOS の IOAudioFamily コンポーネントにおける重要なカーネルメモリのレイアウト情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2017-2357 2017-02-27 16:20 2017-01-23 Show GitHub Exploit DB Packet Storm
200812 7.8 重要
Local
アップル - Apple macOS の Bluetooth コンポーネントにおける特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-2353 2017-02-27 16:20 2017-01-23 Show GitHub Exploit DB Packet Storm
200813 6.5 警告
Network
アップル - Apple iOS などの製品で使用される WebKit におけるポップアップを起動される脆弱性 CWE-254
セキュリティ機能
CVE-2017-2371 2017-02-27 15:43 2017-01-23 Show GitHub Exploit DB Packet Storm
200814 5.5 警告
Local
アップル - Apple iOS の連絡先コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-2368 2017-02-27 15:43 2017-01-23 Show GitHub Exploit DB Packet Storm
200815 2.4
Physics
アップル - Apple iOS の WiFi コンポーネントにおけるアクティベーションロック保護メカニズムを回避される脆弱性 CWE-254
セキュリティ機能
CVE-2017-2351 2017-02-27 15:43 2017-01-23 Show GitHub Exploit DB Packet Storm
200816 7.5 重要
Network
Arvid Norberg - Libtorrent の puff.cpp の construct 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-7164 2017-02-27 15:06 2016-08-21 Show GitHub Exploit DB Packet Storm
200817 9.8 緊急
Network
Gradle Inc. - Gradle の ObjectSocketWrapper.java における任意のコードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2016-6199 2017-02-27 15:05 2016-05-24 Show GitHub Exploit DB Packet Storm
200818 8.8 重要
Network
Dotclear - Dotclear の inc/core/class.dc.core.php における任意の PHP コードを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2015-8832 2017-02-27 15:04 2015-10-25 Show GitHub Exploit DB Packet Storm
200819 6.1 警告
Network
Dotclear - Dotclear の admin/comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8831 2017-02-27 15:04 2015-10-25 Show GitHub Exploit DB Packet Storm
200820 4.3 警告
Network
IBM - IBM UrbanCode Deploy における Ucd オブジェクトを変更される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-0320 2017-02-27 15:02 2016-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2831 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer and enforces assert(rc < len) on the sctp_recvmsg() re… CWE-617
 Reachable Assertion
CVE-2026-37228 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2832 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote unauthenticated attacker can send any non-PER byte sequence (e.g., a single 0x00 b… CWE-617
 Reachable Assertion
CVE-2026-37229 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2833 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup returns NULL, triggering assert() in Debug builds (SIG… CWE-476
 NULL Pointer Dereference
CVE-2026-37230 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2834 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, the 16-bit counter wraps around and produces duplicate… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-37231 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2835 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0->xapp_id against itself (m… CWE-617
 Reachable Assertion
CVE-2026-37233 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2836 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association. The validation function valid_xapp_id() only checks that the value is within the… CWE-284
Improper Access Control
CVE-2026-37235 2026-06-4 02:15 2026-06-2 Show GitHub Exploit DB Packet Storm
2837 6.5 MEDIUM
Network
nextcloud nextcloud_server Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14, and 32.0.0 to before 32.0.4, if {lang} is used in the template directory config… CWE-22
Path Traversal
CVE-2026-45279 2026-06-4 02:15 2026-06-2 Show GitHub Exploit DB Packet Storm
2838 8.1 HIGH
Network
nextcloud nextcloud_server Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, with the knowledge of other users’ principal URL an… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-45281 2026-06-4 02:11 2026-06-2 Show GitHub Exploit DB Packet Storm
2839 8.1 HIGH
Network
jupyter jupyter_server A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/services/contents/fileio.… CWE-23
 Relative Path Traversal
CVE-2026-5422 2026-06-4 02:09 2026-06-2 Show GitHub Exploit DB Packet Storm
2840 6.5 MEDIUM
Network
nextcloud nextcloud_server Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can access attachments of… CWE-284
NVD-CWE-noinfo
Improper Access Control
CVE-2026-45282 2026-06-4 02:09 2026-06-2 Show GitHub Exploit DB Packet Storm