Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201661 8.8 重要
Network 		Arista Networks, Inc. - Arista CloudVision Portal における内部構成メカニズムへのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9012 2017-02-8 12:21 2016-12-1 Show GitHub Exploit DB Packet Storm
201662 9.8 緊急
Network 		Joomla! - Joomla! におけるユーザ名などのアサイメントをリセットされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-9081 2017-02-8 12:11 2016-10-25 Show GitHub Exploit DB Packet Storm
201663 5.5 警告
Local 		GNU Project - bash の popd における制限されたシェルを回避される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2016-9401 2017-02-8 11:25 2016-11-17 Show GitHub Exploit DB Packet Storm
201664 6.5 警告
Network 		Paessler AG - PRTG Network Monitor における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2015-7743 2017-02-8 10:41 2015-08-28 Show GitHub Exploit DB Packet Storm
201665 9.8 緊急
Network 		Vivint, Inc. - Vivint SkyControl Panel におけるアラームシステムを有効/無効にされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2014-8362 2017-02-8 10:31 2014-09-25 Show GitHub Exploit DB Packet Storm
201666 7.5 重要
Network 		GStreamer - GStreamer の vmnc デコーダにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9446 2017-02-8 10:06 2016-11-16 Show GitHub Exploit DB Packet Storm
201667 7.8 重要
Local 		GStreamer - GStreamer の NSF デコーダの ROM マッピングにおけるサービス運用妨害 (DoS) の脆弱性 CWE-125
CWE-787
CVE-2016-9447 2017-02-8 10:06 2016-11-14 Show GitHub Exploit DB Packet Storm
201668 7.5 重要
Network 		The PHP Group - PHP の ext/wddx/wddx.c の php_wddx_pop_element 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-10162 2017-02-7 17:42 2016-12-29 Show GitHub Exploit DB Packet Storm
201669 7.5 重要
Network 		The PHP Group - PHP の ext/standard/var_unserializer.c の object_common1 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-10161 2017-02-7 17:42 2016-12-31 Show GitHub Exploit DB Packet Storm
201670 9.8 緊急
Network 		The PHP Group - PHP の ext/phar/phar.c の phar_parse_pharfile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-10160 2017-02-7 17:42 2016-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3151 4.3 MEDIUM
Network 		accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resou… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-24756 2026-06-4 00:26 2026-06-2 Show GitHub Exploit DB Packet Storm
3152 4.3 MEDIUM
Network 		accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metad… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-24761 2026-06-4 00:17 2026-06-2 Show GitHub Exploit DB Packet Storm
3153 8.8 HIGH
Network 		accellion kiteworks Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBui… CWE-89
SQL Injection 		CVE-2026-24782 2026-06-4 00:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3154 9.8 CRITICAL
Network 		trendnet tew-432brp_firmware A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to comma… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-10060 2026-06-3 23:39 2026-05-29 Show GitHub Exploit DB Packet Storm
3155 9.8 CRITICAL
Network 		trendnet tew-432brp_firmware A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command injection. The atta… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-10061 2026-06-3 23:36 2026-05-29 Show GitHub Exploit DB Packet Storm
3156 7.8 HIGH
Local 		google android In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation of privilege with no additional execution… CWE-693
 Protection Mechanism Failure 		CVE-2025-48649 2026-06-3 23:35 2026-06-2 Show GitHub Exploit DB Packet Storm
3157 6.8 MEDIUM
Physics 		opensc_project opensc OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trig… CWE-121
Stack-based Buffer Overflow 		CVE-2026-40510 2026-06-3 23:30 2026-05-29 Show GitHub Exploit DB Packet Storm
3158 7.8 HIGH
Local 		opensc_project opensc OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memor… CWE-121
CWE-122
Stack-based Buffer Overflow
Heap-based Buffer Overflow 		CVE-2026-40528 2026-06-3 23:28 2026-05-29 Show GitHub Exploit DB Packet Storm
3159 7.8 HIGH
Local 		google android In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution priv… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2026-0036 2026-06-3 23:21 2026-06-2 Show GitHub Exploit DB Packet Storm
3160 9.8 CRITICAL
Network 		trendnet tew-432brp_firmware A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of the argument ip/mask/… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-10062 2026-06-3 23:21 2026-05-30 Show GitHub Exploit DB Packet Storm