Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202151 4.7 警告
Local
Linux - 複数のカーネルコンポーネントにおける情報を開示される脆弱性 CWE-200
情報漏えい
CVE-2016-8401 2017-01-23 19:04 2016-12-5 Show GitHub Exploit DB Packet Storm
202152 8.1 重要
Network
D-Link Systems, Inc. - D-Link DGS-1100 デバイスの Rev.B ファームウェアにおけるデバイスになりすまされる脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2016-10125 2017-01-23 16:48 2016-08-24 Show GitHub Exploit DB Packet Storm
202153 8.8 重要
Network
アップル - Apple GarageBand および Logic Pro X の脆弱性に対するアップデート CWE-119
バッファエラー
CVE-2017-2372 2017-01-23 16:35 2017-01-19 Show GitHub Exploit DB Packet Storm
202154 5.9 警告
Network
インテル - Intel Ethernet Controller X710/XL710 の不揮発性メモリのイメージにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-8106 2017-01-23 16:33 2016-09-9 Show GitHub Exploit DB Packet Storm
202155 7.5 重要
Network
Python Software Foundation - Python HPACK ライブラリを使用してビルドされた HTTP/2 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6581 2017-01-23 16:12 2016-08-4 Show GitHub Exploit DB Packet Storm
202156 7.5 重要
Network
Python Software Foundation - Python priority ライブラリを使用してビルドされた HTTP/2 の実装における CPU 資源の高い消費状態を引き起こされる脆弱性 CWE-399
リソース管理の問題
CVE-2016-6580 2017-01-23 16:12 2016-08-4 Show GitHub Exploit DB Packet Storm
202157 9.8 緊急
Network
eClinicalWorks - eClinicalWorks Population Health におけるセッションの固定化の脆弱性 CWE-284
CWE-384
CVE-2015-4594 2017-01-23 16:00 2015-06-16 Show GitHub Exploit DB Packet Storm
202158 7.5 重要
Network
The Chicken Team - CHICKEN の "http-client" egg におけるすべての HTTP リクエストをプロキシ経由にされる脆弱性 CWE-19
データ処理
CVE-2016-6287 2017-01-23 15:33 2016-07-21 Show GitHub Exploit DB Packet Storm
202159 7.5 重要
Network
The Chicken Team - CHICKEN の "spiffy-cgi-handlers" egg の CGI プログラムにおける攻撃者が指定した HTTP プロキシサーバの使用を強制される脆弱性 CWE-19
データ処理
CVE-2016-6286 2017-01-23 15:33 2016-07-21 Show GitHub Exploit DB Packet Storm
202160 9.8 緊急
Network
Pivotal Software, Inc. - Pivotal GemFire for PCF の gfsh エンドポイントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-200
CWE-254
CVE-2016-9885 2017-01-23 14:54 2016-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2961 9.9 CRITICAL
Network
linuxfoundation cloudnativepg CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as t… CWE-250
CWE-271
CWE-426
 Execution with Unnecessary Privileges
 Privilege Dropping / Lowering Errors
 Untrusted Search Path
CVE-2026-44477 2026-06-4 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
2962 8.0 HIGH
Network
microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-78
OS Command 
CVE-2026-47294 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
2963 6.3 MEDIUM
Network
vivotek fd8136_firmware A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST… CWE-121
Stack-based Buffer Overflow
CVE-2026-35717 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
2964 7.3 HIGH
Network
vivotek fd8136_firmware Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component CWE-121
Stack-based Buffer Overflow
CVE-2026-30649 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
2965 8.8 HIGH
Network
vivotek fd8136_firmware A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-03… CWE-120
Classic Buffer Overflow
CVE-2026-30650 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
2966 8.8 HIGH
Network
vivotek fd8136_firmware A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an … CWE-120
Classic Buffer Overflow
CVE-2026-30652 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
2967 6.3 MEDIUM
Network
vivotek fd8136_firmware A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized n1… CWE-121
Stack-based Buffer Overflow
CVE-2026-35716 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
2968 6.5 MEDIUM
Network
vivotek fd8136_firmware A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted … CWE-22
Path Traversal
CVE-2026-35718 2026-06-4 03:39 2026-06-3 Show GitHub Exploit DB Packet Storm
2969 9.9 CRITICAL
Network
oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc… CWE-400
CWE-284
 Uncontrolled Resource Consumption
Improper Access Control
CVE-2026-46775 2026-06-4 03:35 2026-05-29 Show GitHub Exploit DB Packet Storm
2970 9.6 CRITICAL
Network
jpettitt meshcore_card MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect … CWE-79
Cross-site Scripting
CVE-2026-45323 2026-06-4 03:34 2026-05-29 Show GitHub Exploit DB Packet Storm