Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203241 5.5 警告
Local
GNOME Project - GNOME Structured File Library の gsf-infile-tar.c のtar_directory_for_file() 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-9888 2016-12-9 11:30 2016-12-3 Show GitHub Exploit DB Packet Storm
203242 7.8 重要
Local
Linux - Linux Kernel の net/packet/af_packet.c における権限を取得される脆弱性 CWE-362
CWE-416
CVE-2016-8655 2016-12-9 11:04 2016-12-1 Show GitHub Exploit DB Packet Storm
203243 4.3 警告 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox におけるアドレスバーを偽装される脆弱性 CWE-Other
その他
CVE-2016-1965 2016-12-8 18:14 2016-03-8 Show GitHub Exploit DB Packet Storm
203244 6.8 警告 Mozilla Foundation
openSUSE project
SUSE
オラクル
- Mozilla Firefox の AtomicBaseIncDec 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-1964 2016-12-8 18:14 2016-03-8 Show GitHub Exploit DB Packet Storm
203245 10 危険 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox の mozilla::DataChannelConnection::Close 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-1962 2016-12-8 18:14 2016-03-8 Show GitHub Exploit DB Packet Storm
203246 4.3 警告
Network
日立
オラクル
- Oracle Java SE および Java SE Embedded における CORBA に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3458 2016-12-8 15:15 2016-07-19 Show GitHub Exploit DB Packet Storm
203247 3.7
Network
レッドハット
IBM
MariaDB Corporation Ab.
オラクル
- Oracle MySQL の MySQL Server および MariaDB における Server: Security: Encryption に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3452 2016-12-8 15:15 2016-07-19 Show GitHub Exploit DB Packet Storm
203248 5.5 警告
Local
IBM
openSUSE project
Debian
MariaDB Corporation Ab.
オラクル
レッドハット
- Oracle MySQL の MySQL Server および MariaDB における Server: Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0650 2016-12-8 15:15 2016-04-19 Show GitHub Exploit DB Packet Storm
203249 5.5 警告
Local
IBM
openSUSE project
Debian
MariaDB Corporation Ab.
オラクル
レッドハット
- Oracle MySQL の MySQL Server および MariaDB における Server: PS に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0648 2016-12-8 15:15 2016-04-19 Show GitHub Exploit DB Packet Storm
203250 5.5 警告
Local
IBM
openSUSE project
Debian
MariaDB Corporation Ab.
オラクル
レッドハット
- Oracle MySQL の MySQL Server および MariaDB における Server: FTS に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0647 2016-12-8 15:15 2016-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3251 - - - A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplied fields in UsersController::edit(). When processing edit requests, the applica… CWE-269
 Improper Privilege Management
CVE-2026-10868 2026-06-5 01:20 2026-06-5 Show GitHub Exploit DB Packet Storm
3252 8.8 HIGH
Network
- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUpdate` as a state-changing administrator endpoint, but the route does not enforc… CWE-352
 Origin Validation Error
CVE-2026-43985 2026-06-5 01:20 2026-06-5 Show GitHub Exploit DB Packet Storm
3253 6.1 MEDIUM
Network
- - Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE_SCHEMA, Memo Rendering Component, and Public/Private Memo View … CWE-79
Cross-site Scripting
CVE-2026-30586 2026-06-5 01:18 2026-06-3 Show GitHub Exploit DB Packet Storm
3254 5.0 MEDIUM
Local
- - A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS)… CWE-476
 NULL Pointer Dereference
CVE-2025-60477 2026-06-5 01:18 2026-06-3 Show GitHub Exploit DB Packet Storm
3255 - - - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Versions prior to 5.0.13, 4.1.… CWE-79
Cross-site Scripting
CVE-2022-31114 2026-06-5 01:18 2026-06-4 Show GitHub Exploit DB Packet Storm
3256 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable to remote code execution via the newsletter custom template directory feature. O… CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-41065 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
3257 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vulnerability in the cache deletion endpoint allows authenticated API access t… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-40605 2026-06-5 01:16 2026-06-4 Show GitHub Exploit DB Packet Storm
3258 4.6 MEDIUM
Physics
- - The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive u… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-36178 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
3259 6.5 MEDIUM
Network
- - (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the sa… - CVE-2026-27145 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
3260 7.5 HIGH
Network
- - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-42504 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm