Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201851 8.8 重要
Network
Google - Google Chrome の PDF プラグインにおける同一生成元ポリシーを回避される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5206 2017-01-26 14:43 2016-12-1 Show GitHub Exploit DB Packet Storm
201852 6.5 警告
Network
Google - Google Chrome の 拡張機能 API における特権付き JavaScript コードにアクセスされる脆弱性 CWE-200
情報漏えい
CVE-2016-5201 2017-01-26 14:43 2016-11-9 Show GitHub Exploit DB Packet Storm
201853 8.8 重要
Network
Google - Google Chrome の V8 におけるヒープを破損される脆弱性 CWE-119
バッファエラー
CVE-2016-5200 2017-01-26 14:43 2016-11-9 Show GitHub Exploit DB Packet Storm
201854 8.8 重要
Network
Google - Google Chrome の FFmpeg におけるヒープを破損される脆弱性 CWE-119
バッファエラー
CVE-2016-5199 2017-01-26 14:43 2016-11-9 Show GitHub Exploit DB Packet Storm
201855 8.8 重要
Network
Google - Google Chrome のコンテンツビュークライアントにおけるシステム上で任意のアクティビティを開始される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5197 2017-01-26 14:43 2016-10-31 Show GitHub Exploit DB Packet Storm
201856 8.8 重要
Network
Google - Google Chrome のコンテンツレンダラクライアントにおける全てのダウンロードファイルにアクセスされる脆弱性 CWE-254
セキュリティ機能
CVE-2016-5196 2017-01-26 14:43 2016-10-31 Show GitHub Exploit DB Packet Storm
201857 7.5 重要
Network
NTP Project - NTP の ntpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-410
CVE-2016-9312 2017-01-26 11:44 2016-11-21 Show GitHub Exploit DB Packet Storm
201858 5.9 警告
Network
NTP Project - NTP の ntpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-9311 2017-01-26 11:44 2016-11-21 Show GitHub Exploit DB Packet Storm
201859 6.5 警告
Network
NTP Project - NTP の ntpd の制御モード機能における trap を設定される脆弱性 CWE-400
リソースの枯渇
CVE-2016-9310 2017-01-26 11:44 2016-11-21 Show GitHub Exploit DB Packet Storm
201860 7.5 重要
Network
NTP Project - NTP の read_mru_list 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-7434 2017-01-26 11:44 2016-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2691 - - - Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet. CWE-200
Information Exposure
CVE-2026-49193 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2692 - - - The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and directly enter an interactive shell interface. CWE-287
Improper Authentication
CVE-2026-49194 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2693 - - - Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft. CWE-287
Improper Authentication
CVE-2026-49202 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2694 - - - Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted. CWE-287
Improper Authentication
CVE-2026-49203 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2695 - - - Leftover debug modules contain fixed credentials for internal AWS Cognito test sandboxes, risking asset exploitation. CWE-798
 Use of Hard-coded Credentials
CVE-2026-49204 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2696 - - - System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-50205 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2697 - - - Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files. CWE-78
OS Command 
CVE-2026-50206 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2698 - - - The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity. CWE-22
Path Traversal
CVE-2026-50207 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2699 - - - High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic. CWE-330
 Use of Insufficiently Random Values
CVE-2026-50208 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2700 - - - Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-50209 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm