Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201591 5.3 警告
Network
Digium - Asterisk Open Source および Certified Asterisk の chan_sip チャネルドライバにおけるプロキシの認証なしに Asterisk に INVITE リクエストを許可される脆弱性 CWE-285
不適切な認可
CVE-2016-9938 2017-01-6 11:48 2016-12-8 Show GitHub Exploit DB Packet Storm
201592 7.1 重要
Local
Image-Info project - Image::Info におけるサービス運用妨害 (DoS) の脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2016-9181 2017-01-6 11:18 2016-09-27 Show GitHub Exploit DB Packet Storm
201593 9.8 緊急
Network
Bundler - Bundler における任意の Ruby コードをアプリケーションに挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2016-7954 2017-01-6 11:03 2016-10-5 Show GitHub Exploit DB Packet Storm
201594 7.5 重要
Network
Digium - Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-9937 2017-01-6 09:40 2016-11-11 Show GitHub Exploit DB Packet Storm
201595 6.1 警告
Network
Tiki Software Community Association - Tiki Wiki CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9889 2017-01-5 18:40 2016-12-22 Show GitHub Exploit DB Packet Storm
201596 8.1 重要
Network
シーメンス - SIEMENS SIMATIC WinCC および SIEMENS SIMATIC PCS 7 における ActiveX コンポーネントをクラッシュさせられる脆弱性 CWE-254
セキュリティ機能
CVE-2016-9160 2017-01-5 18:24 2016-12-9 Show GitHub Exploit DB Packet Storm
201597 5.9 警告
Network
シーメンス - SIEMENS SIMATIC S7-300 PN CPU および SIMATIC S7-400 PN CPU における PLC から資格情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-9159 2017-01-5 18:24 2016-12-9 Show GitHub Exploit DB Packet Storm
201598 7.5 重要
Network
シーメンス - SIEMENS SIMATIC S7-300 PN CPU および SIMATIC S7-400 PN CPU におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9158 2017-01-5 18:24 2016-12-9 Show GitHub Exploit DB Packet Storm
201599 7.5 重要
Network
シーメンス - Siemens Desigo PX オートメーションコントローラ用 Desigo PX Web モジュールにおける対応する秘密鍵を再構成される脆弱性 CWE-332
PRNG における不十分なエントロピー
CVE-2016-9154 2017-01-5 18:24 2016-12-16 Show GitHub Exploit DB Packet Storm
201600 7 重要
Local
Percona
MariaDB Corporation Ab.
オラクル
- Oracle MySQL およびその他のデータベースにおける権限を取得される脆弱性 CWE-362
競合状態
CVE-2016-6663 2017-01-5 18:20 2016-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
171 7.1 HIGH
Adjacent
- - Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. New CWE-190
 Integer Overflow or Wraparound
CVE-2026-47288 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
172 6.5 MEDIUM
Network
- - Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. New CWE-23
 Relative Path Traversal
CVE-2026-47287 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
173 6.5 MEDIUM
Network
- - Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network. New CWE-200
Information Exposure
CVE-2026-47284 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
174 9.6 CRITICAL
Network
- - Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. New CWE-306
CWE-798
CWE-862
Missing Authentication for Critical Function
 Use of Hard-coded Credentials
 Missing Authorization
CVE-2026-47281 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
175 7.2 HIGH
Network
- - md-fileserver allows for local viewing of markdown files in a browser. Prior to version 1.10.3, a cross-site scripting (XSS) vulnerability exists in the application’s Markdown rendering logic. When u… New CWE-80
CWE-87
Basic XSS
 Improper Neutralization of Alternate XSS Syntax
CVE-2026-46492 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
176 - - - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when credentials are fetched with a credentialName filter parameter, the encryptedData… New CWE-200
Information Exposure
CVE-2026-46443 2026-06-10 02:17 2026-06-9 Show GitHub Exploit DB Packet Storm
177 7.5 HIGH
Network
- - FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version… New CWE-776
XML Entity Expansion
CVE-2026-45771 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
178 7.8 HIGH
Local
- - Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. New CWE-284
Improper Access Control
CVE-2026-45658 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
179 9.8 CRITICAL
Network
- - Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network. New CWE-122
CWE-416
Heap-based Buffer Overflow
 Use After Free
CVE-2026-45657 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
180 7.8 HIGH
Local
- - Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. New CWE-693
 Protection Mechanism Failure
CVE-2026-45656 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm