Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201811 9.8 緊急
Network 		Linux - 信頼ゾーンのアクセス制御の API におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-8439 2017-01-27 10:14 2016-10-5 Show GitHub Exploit DB Packet Storm
201812 9.8 緊急
Network 		Linux - ハイパーバイザの PIL における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-8438 2017-01-27 10:14 2016-10-5 Show GitHub Exploit DB Packet Storm
201813 9.8 緊急
Network 		Linux - アクセス制御の API におけるメモリ範囲のチェックを誤って返される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-8437 2017-01-27 10:13 2016-10-5 Show GitHub Exploit DB Packet Storm
201814 5.5 警告
Local 		Google - ブートローダにおける情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-8462 2017-01-26 18:12 2016-10-27 Show GitHub Exploit DB Packet Storm
201815 9.8 緊急
Network 		Linux - ストレージサブシステムにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-8459 2017-01-26 18:03 2016-10-5 Show GitHub Exploit DB Packet Storm
201816 5.5 警告
Local 		Linux - NVIDIA ビデオドライバにおける情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-8460 2017-01-26 17:57 2016-09-21 Show GitHub Exploit DB Packet Storm
201817 9.8 緊急
Network 		Linux - UE における未認証のメッセージを処理される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-8398 2017-01-26 17:39 2016-10-5 Show GitHub Exploit DB Packet Storm
201818 5.5 警告
Local 		Linux - NVIDIA librm ライブラリにおける情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-8400 2017-01-26 17:39 2016-12-5 Show GitHub Exploit DB Packet Storm
201819 7.8 重要
Local 		Google - Wi-Fi における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6772 2017-01-26 17:38 2016-12-5 Show GitHub Exploit DB Packet Storm
201820 4.6 警告
Physics 		Google - Smart Lock における権限を昇格される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6769 2017-01-26 17:38 2016-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2801 6.1 MEDIUM
Local 		- - Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635. CWE-787
 Out-of-bounds Write 		CVE-2026-8916 2026-06-5 00:27 2026-06-4 Show GitHub Exploit DB Packet Storm
2802 - - - This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker cou… CWE-78
OS Command  		CVE-2026-45431 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2803 - - - This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-45432 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2804 - - - This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the… CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-45433 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2805 9.1 CRITICAL
Network 		- - A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-4035 2026-06-5 00:25 2026-06-3 Show GitHub Exploit DB Packet Storm
2806 6.1 MEDIUM
Network 		- - A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use o… CWE-346
 Origin Validation Error 		CVE-2026-6657 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2807 - - - A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: ver… CWE-250
 Execution with Unnecessary Privileges 		CVE-2025-12694 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2808 8.1 HIGH
Network 		- - HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site v… CWE-1027
CVE-2025-59874 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2809 - - - An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. CWE-79
Cross-site Scripting 		CVE-2026-5385 2026-06-5 00:23 2026-06-3 Show GitHub Exploit DB Packet Storm
2810 - - - An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and trigger unescaped rendering in the … CWE-79
Cross-site Scripting 		CVE-2026-42839 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm