Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201431 7.5 重要
Network
The PHP Group
LibGD project
- PHP で使用される GD Graphics Library の gd.c の gdImageFillToBorder 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-9933 2017-01-16 17:03 2016-06-10 Show GitHub Exploit DB Packet Storm
201432 9.8 緊急
Network
The PHP Group - PHP におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9138 2017-01-16 17:03 2016-09-23 Show GitHub Exploit DB Packet Storm
201433 9.8 緊急
Network
The PHP Group - PHP の ext/curl/curl_file.c の CURLFile の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9137 2017-01-16 17:03 2016-10-13 Show GitHub Exploit DB Packet Storm
201434 9.8 緊急
Network
LibGD project - PHP で使用される GD Graphics Library の gd_io_dp.c の dynamicGetbuf 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-8670 2017-01-16 17:03 2016-10-12 Show GitHub Exploit DB Packet Storm
201435 9.8 緊急
Network
The PHP Group - PHP の ext/intl/locale/locale_methods.c の get_icu_disp_value_src_php 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9912 2017-01-16 17:03 2014-06-24 Show GitHub Exploit DB Packet Storm
201436 7.8 重要
Local
OpenBSD - OpenSSH の sshd の共有メモリマネージャにおける権限を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-10012 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
201437 5.5 警告
Local
OpenBSD - OpenSSH の sshd の authfile.c における重要な秘密鍵の情報を取得される脆弱性 CWE-320
鍵管理のエラー
CVE-2016-10011 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
201438 7 重要
Local
OpenBSD - OpenSSH の sshd における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10010 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
201439 7.5 重要
Network
ISC, Inc. - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9444 2017-01-16 11:13 2016-11-18 Show GitHub Exploit DB Packet Storm
201440 7.5 重要
Network
ISC, Inc. - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9147 2017-01-16 11:13 2016-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2881 3.8 LOW
Network
tfa_basic_plugins_project tfa_basic_plugins An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affects TFA Basic Plugins… CWE-267
 Privilege Defined With Unsafe Actions
CVE-2026-6816 2026-06-2 02:15 2026-05-29 Show GitHub Exploit DB Packet Storm
2882 8.8 HIGH
Network
apache activemq Incorrect Default Permissions vulnerability in Apache ActiveMQ. This issue affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. The default Jolokia authorization settings granted non-ad… CWE-276
Incorrect Default Permissions 
CVE-2026-49157 2026-06-2 02:09 2026-06-1 Show GitHub Exploit DB Packet Storm
2883 5.9 MEDIUM
Network
apache activemq
activemq_broker
Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Brokers that are configured with a network connector with syncDurabl… CWE-1230
 Exposure of Sensitive Information Through Metadata
CVE-2026-49270 2026-06-2 02:09 2026-06-1 Show GitHub Exploit DB Packet Storm
2884 8.8 HIGH
Network
apache activemq
activemq_broker
Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesized discovery wrapp… CWE-20
CWE-94
 Improper Input Validation 
Code Injection
CVE-2026-45505 2026-06-2 02:09 2026-06-1 Show GitHub Exploit DB Packet Storm
2885 6.5 MEDIUM
Network
apache airflow A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connect… CWE-200
Information Exposure
CVE-2026-45192 2026-06-2 02:08 2026-06-1 Show GitHub Exploit DB Packet Storm
2886 6.5 MEDIUM
Network
apache mina_sshd Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to … CWE-22
Path Traversal
CVE-2026-48827 2026-06-2 02:08 2026-06-1 Show GitHub Exploit DB Packet Storm
2887 9.1 CRITICAL
Network
- - The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without … CWE-620
 Unverified Password Change
CVE-2026-5386 2026-06-2 02:07 2026-05-30 Show GitHub Exploit DB Packet Storm
2888 8.4 HIGH
Network
- - A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can injec… CWE-79
Cross-site Scripting
CVE-2026-6824 2026-06-2 02:07 2026-05-30 Show GitHub Exploit DB Packet Storm
2889 9.8 CRITICAL
Network
- - Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials … CWE-798
 Use of Hard-coded Credentials
CVE-2026-7786 2026-06-2 02:07 2026-05-30 Show GitHub Exploit DB Packet Storm
2890 8.8 HIGH
Adjacent
- - The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This allows attackers within BLE range … CWE-306
Missing Authentication for Critical Function
CVE-2026-5768 2026-06-2 02:07 2026-05-30 Show GitHub Exploit DB Packet Storm