Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203151 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の build_huffcodes 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-787
境界外書き込み
CVE-2016-6237 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
203152 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の setup_imginfo_jpg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-6236 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
203153 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の setup_imginfo_jpg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6235 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
203154 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の process_file 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-6234 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
203155 9.8 緊急
Network
The WebM Project
Fedora Project
- libwebp における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9085 2017-02-16 14:46 2016-10-10 Show GitHub Exploit DB Packet Storm
203156 5.5 警告
Local
cairographics.org - cairo の write_png 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9082 2017-02-16 14:46 2016-10-20 Show GitHub Exploit DB Packet Storm
203157 5.5 警告
Local
GNOME Project - librsvg2 の rsvg-paint_server.c の rsvg_pattern_fix_fallback 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-6163 2017-02-16 14:46 2016-07-7 Show GitHub Exploit DB Packet Storm
203158 8.8 重要
Network
トレンドマイクロ - Trend Micro VMI の /vmi/manager/engine/management/commands/apns_worker.py における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-6270 2017-02-16 14:30 2016-09-30 Show GitHub Exploit DB Packet Storm
203159 7.8 重要
Local
IBM - IBM Security Guardium Database Activity Monito アプライアンスにおけるコマンドを挿入される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-6065 2017-02-16 14:26 2016-12-15 Show GitHub Exploit DB Packet Storm
203160 6.3 警告
Network
IBM - IBM Security Privileged Identity Manager 仮想アプライアンスにおける悪意のあるファイルをアップロードされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5990 2017-02-16 14:26 2016-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4041 6.1 MEDIUM
Network
hcltech digital_experience_compose
digital_experience
HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host header and cause the application to behave in unexpected … CWE-601
Open Redirect
CVE-2026-21826 2026-06-11 04:24 2026-06-5 Show GitHub Exploit DB Packet Storm
4042 6.1 MEDIUM
Network
hcltech digital_experience_compose
digital_experience
HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.  An attacker could execute arbitrary JavaScript in the victim's browser. CWE-79
Cross-site Scripting
CVE-2026-21825 2026-06-11 04:24 2026-06-5 Show GitHub Exploit DB Packet Storm
4043 8.8 HIGH
Network
google chrome Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low) CWE-125
Out-of-bounds Read
CVE-2026-11279 2026-06-11 04:22 2026-06-5 Show GitHub Exploit DB Packet Storm
4044 6.5 MEDIUM
Network
google chrome Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: … CWE-346
 Origin Validation Error
CVE-2026-11278 2026-06-11 04:19 2026-06-5 Show GitHub Exploit DB Packet Storm
4045 - - - bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompres… CWE-121
Stack-based Buffer Overflow
CVE-2026-9669 2026-06-11 04:16 2026-06-9 Show GitHub Exploit DB Packet Storm
4046 - - - An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation. CWE-20
 Improper Input Validation 
CVE-2026-9211 2026-06-11 04:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4047 - - - Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… CWE-20
 Improper Input Validation 
CVE-2026-9210 2026-06-11 04:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4048 7.5 HIGH
Network
securly securly Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes). CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-8889 2026-06-11 04:16 2026-06-4 Show GitHub Exploit DB Packet Storm
4049 - - - tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. T… CWE-22
Path Traversal
CVE-2026-7774 2026-06-11 04:16 2026-06-5 Show GitHub Exploit DB Packet Storm
4050 - - - Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests. CWE-787
 Out-of-bounds Write
CVE-2026-3088 2026-06-11 04:16 2026-06-10 Show GitHub Exploit DB Packet Storm