Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202341 10 危険 日立
Canonical
オラクル
- 複数の Oracle Java 製品における AWT に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0483 2016-11-21 15:32 2016-01-19 Show GitHub Exploit DB Packet Storm
202342 5.8 警告 日立
オラクル
- 複数の Oracle Java 製品における Libraries に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0475 2016-11-21 15:32 2016-01-19 Show GitHub Exploit DB Packet Storm
202343 5 警告 日立
Canonical
オラクル
- 複数の Oracle Java 製品 における JAXP に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0466 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
202344 4 警告 日立
Canonical
オラクル
- Oracle Java SE および Java SE Embedded における JMX に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0448 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
202345 5 警告 日立
Canonical
オラクル
- Oracle Java SE および Java SE Embedded における Networking に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0402 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
202346 6.8 警告
Local
オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-Other
その他
CVE-2016-5610 2016-11-21 12:23 2016-10-18 Show GitHub Exploit DB Packet Storm
202347 5.5 警告
Local
ImageMagick
Canonical
レッドハット
- ImageMagick の LABEL コーダにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-3717 2016-11-21 12:02 2016-05-3 Show GitHub Exploit DB Packet Storm
202348 6.3 警告
Local
ImageMagick
Canonical
レッドハット
- ImageMagick の HTTP および FTP コーダにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-20
不適切な入力確認
CVE-2016-3718 2016-11-21 11:59 2016-05-3 Show GitHub Exploit DB Packet Storm
202349 3.3
Local
ImageMagick
Canonical
レッドハット
- ImageMagick の MSL コーダにおける任意のファイルを移動される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3716 2016-11-21 11:45 2016-05-3 Show GitHub Exploit DB Packet Storm
202350 6.5 警告
Network
LibGD project
Debian
openSUSE project
- GD Graphics Library の gd_tga.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6214 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2741 7.6 HIGH
Network
ibm cognos_analytics
cognos_transformer
IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows… CWE-79
Cross-site Scripting
CVE-2025-36126 2026-06-2 02:30 2026-05-27 Show GitHub Exploit DB Packet Storm
2742 7.4 HIGH
Network
miniorange saml_sso_-_service_provider Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0 befor… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-5343 2026-06-2 02:29 2026-05-29 Show GitHub Exploit DB Packet Storm
2743 8.8 HIGH
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without track… CWE-415
CWE-416
 Double Free
 Use After Free
CVE-2026-44422 2026-06-2 02:26 2026-05-30 Show GitHub Exploit DB Packet Storm
2744 5.3 MEDIUM
Network
ibm watsonx.data IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. CWE-923
NVD-CWE-noinfo
 Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-36145 2026-06-2 02:24 2026-05-27 Show GitHub Exploit DB Packet Storm
2745 9.8 CRITICAL
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/pl… CWE-787
 Out-of-bounds Write
CVE-2026-45700 2026-06-2 02:23 2026-05-30 Show GitHub Exploit DB Packet Storm
2746 6.1 MEDIUM
Network
ibm financial_transaction_manager_for_multiplatform IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allo… CWE-79
Cross-site Scripting
CVE-2025-36148 2026-06-2 02:22 2026-05-27 Show GitHub Exploit DB Packet Storm
2747 8.8 HIGH
Network
google chrome Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-10013 2026-06-2 02:22 2026-05-29 Show GitHub Exploit DB Packet Storm
2748 9.6 CRITICAL
Network
google chrome Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2026-9967 2026-06-2 02:22 2026-05-29 Show GitHub Exploit DB Packet Storm
2749 8.3 HIGH
Network
google chrome Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-9975 2026-06-2 02:21 2026-05-29 Show GitHub Exploit DB Packet Storm
2750 5.0 MEDIUM
Network
google chrome Insufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted … CWE-20
 Improper Input Validation 
CVE-2026-9979 2026-06-2 02:21 2026-05-29 Show GitHub Exploit DB Packet Storm