Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201381 7.5 重要
Network 		Cake Software Foundation - CakePHP の clientIp 関数における IP を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4793 2017-02-7 09:58 2016-03-13 Show GitHub Exploit DB Packet Storm
201382 6.1 警告
Network 		TYPO3 Association - TYPO3 のバックエンドコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-4056 2017-02-7 09:48 2016-02-23 Show GitHub Exploit DB Packet Storm
201383 9.8 緊急
Network 		LANDesk - Landesk Management Suite の collector.exe のリスナーにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-3147 2017-02-6 17:45 2016-10-14 Show GitHub Exploit DB Packet Storm
201384 9.8 緊急
Network 		Exponent CMS project - Exponent CMS における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-2242 2017-02-6 17:43 2016-01-23 Show GitHub Exploit DB Packet Storm
201385 9.8 緊急
Network 		LHa for UNIX project - LHA の header.c における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2016-1925 2017-02-6 17:41 2016-01-16 Show GitHub Exploit DB Packet Storm
201386 7.5 重要
Network 		OneLogin, Inc. - Ruby-saml における XML 署名ラッピング攻撃を実行される脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2016-5697 2017-02-6 17:41 2016-06-24 Show GitHub Exploit DB Packet Storm
201387 8.8 重要
Network 		Snort.org - Snort における任意のコードを実行される脆弱性 CWE-426
信頼性のない検索パス 		CVE-2016-1417 2017-02-6 17:40 2016-09-29 Show GitHub Exploit DB Packet Storm
201388 8.8 重要
Network 		elfden - WordPress 用 eShop プラグインの eshop-orders.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-0769 2017-02-6 17:34 2016-02-2 Show GitHub Exploit DB Packet Storm
201389 6.1 警告
Network 		elfden - WordPress 用 eShop プラグインの eshop-orders.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0765 2017-02-6 17:33 2016-02-2 Show GitHub Exploit DB Packet Storm
201390 7.8 重要
Local 		Debian
Terminology project		 - Terminology における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション 		CVE-2015-8971 2017-02-6 17:32 2015-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3091 6.7 MEDIUM
Local 		qualcomm cologne_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
iqx5121_firmware
iqx7181_firmware
qca0000_firmware
sc8380xp_firmware
wcd9378c_firmware
wcd9380_firmware 		Memory Corruption when sending random number generator command with insufficient output buffer size. CWE-787
 Out-of-bounds Write 		CVE-2025-59614 2026-06-3 00:26 2026-06-2 Show GitHub Exploit DB Packet Storm
3092 7.2 HIGH
Physics 		qualcomm qca6391_firmware
qca6564au_firmware
qca6574_firmware
qca6574a_firmware
qca6574au_firmware
qca6584au_firmware
qca6595_firmware
qca6595au_firmware
qca6678aq_firmware
qca6688a… 		Memory Corruption when processing display command line information due to improper initialization of a variable. CWE-121
Stack-based Buffer Overflow 		CVE-2026-24085 2026-06-3 00:26 2026-06-2 Show GitHub Exploit DB Packet Storm
3093 7.2 HIGH
Physics 		qualcomm ar8031_firmware
ar8035_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
qpa1083bd_firmware
qpa1086bd_firmware
qrb5165n_firmware
qru1032_firmware
qualcomm_dragonwi… 		Memory corruption while processing fastboot OEM commands. CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-24087 2026-06-3 00:26 2026-06-2 Show GitHub Exploit DB Packet Storm
3094 8.2 HIGH
Local 		qualcomm ar9380_firmware
csr8811_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
g1_gen_1_firmware
g2_gen_1_firmware
g3… 		Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. CWE-306
Missing Authentication for Critical Function 		CVE-2026-24088 2026-06-3 00:26 2026-06-2 Show GitHub Exploit DB Packet Storm
3095 7.2 HIGH
Physics 		qualcomm ar8031_firmware
ar8035_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
qmp1000_firmware
qmp2001_firmware
qpa1083bd_firmware
qpa1086bd_firmware
qrb5165n_firmware<… 		Memory corruption while processing fastboot commands with invalid input. CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-24089 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3096 7.1 HIGH
Local 		qualcomm ar8031_firmware
ar8035_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
sm6850_firmware
sm7435_firmware
sm7435p_firmware
sm7525_firmware
sm7550_firmware
sm7550… 		Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. CWE-306
Missing Authentication for Critical Function 		CVE-2026-24090 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3097 7.2 HIGH
Physics 		qualcomm c-v2x_9150_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
cq8750m_firmware
csra6620_firmware
csra6640_firmware
csrb31024_firmware
fastconnect_6200_firmware
fast… 		Memory corruption while processing fastboot commands with improperly formatted input. CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-24091 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3098 7.2 HIGH
Physics 		qualcomm ar8031_firmware
ar8035_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
cq8750m_firmware
csra6620_firmware
csra6640_firmware
fastconnect_6200_firmware
fastconnect… 		Memory Corruption when processing fastboot commands to set display mode. CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-24092 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3099 9.8 CRITICAL
Network 		langflow langflow IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction. CWE-22
Path Traversal 		CVE-2026-7524 2026-06-3 00:24 2026-05-27 Show GitHub Exploit DB Packet Storm
3100 7.8 HIGH
Local 		qualcomm cologne_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
iqx5121_firmware
iqx7181_firmware
qca0000_firmware
sc8380xp_firmware
wcd9378c_firmware
wcd9380_firmware 		Memory corruption while processing IOCTL calls for escape operations. CWE-125
Out-of-bounds Read 		CVE-2026-25258 2026-06-3 00:23 2026-06-2 Show GitHub Exploit DB Packet Storm