Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203831 6.5 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: DML に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5609 2016-10-27 11:22 2016-10-18 Show GitHub Exploit DB Packet Storm
203832 4.4 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Security: Encryption に関する脆弱性 CWE-200
情報漏えい
CVE-2016-5584 2016-10-27 11:22 2016-10-18 Show GitHub Exploit DB Packet Storm
203833 6.4 警告
Local
オラクル - Oracle Database Server の Kernel PDB における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5572 2016-10-27 11:22 2016-10-18 Show GitHub Exploit DB Packet Storm
203834 9.8 緊急
Network
Open Dental Software - Open Dental がデータベースのデフォルトパスワードとしてブランクを設定する問題 CWE-255
証明書・パスワード管理
CVE-2016-6531 2016-10-27 09:48 2016-09-6 Show GitHub Exploit DB Packet Storm
203835 4.3 警告
Network
aki-null - 夜フクロウにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4852 2016-10-27 09:42 2016-08-24 Show GitHub Exploit DB Packet Storm
203836 5.9 警告
Network
OpenSSL Project
日立
ヒューレット・パッカード・エンタープライズ
- OpenSSL の SSLv2 の実装の s2_srvr.c の get_client_master_key 関数における MASTER-KEY 値を決定される脆弱性 CWE-200
情報漏えい
CVE-2016-0703 2016-10-26 18:01 2016-03-1 Show GitHub Exploit DB Packet Storm
203837 9.1 緊急
Network
The PHP Group - PHP の sapi/fpm/fpm/fpm_log.c におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-119
CWE-Other
CVE-2016-5114 2016-10-26 16:44 2016-01-7 Show GitHub Exploit DB Packet Storm
203838 8.6 重要
Network
The PHP Group - PHP の ext/standard/file.c の fread 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5096 2016-10-26 16:43 2016-05-26 Show GitHub Exploit DB Packet Storm
203839 8.6 重要
Network
The PHP Group - PHP の ext/standard/html.c の php_html_entities 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5094 2016-10-26 16:42 2016-05-26 Show GitHub Exploit DB Packet Storm
203840 8.6 重要
Network
The PHP Group - PHP の ext/intl/locale/locale_methods.c の get_icu_value_internal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5093 2016-10-26 16:41 2016-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2961 9.9 CRITICAL
Network
linuxfoundation cloudnativepg CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as t… CWE-250
CWE-271
CWE-426
 Execution with Unnecessary Privileges
 Privilege Dropping / Lowering Errors
 Untrusted Search Path
CVE-2026-44477 2026-06-4 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
2962 8.0 HIGH
Network
microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-78
OS Command 
CVE-2026-47294 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
2963 6.3 MEDIUM
Network
vivotek fd8136_firmware A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST… CWE-121
Stack-based Buffer Overflow
CVE-2026-35717 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
2964 7.3 HIGH
Network
vivotek fd8136_firmware Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component CWE-121
Stack-based Buffer Overflow
CVE-2026-30649 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
2965 8.8 HIGH
Network
vivotek fd8136_firmware A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-03… CWE-120
Classic Buffer Overflow
CVE-2026-30650 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
2966 8.8 HIGH
Network
vivotek fd8136_firmware A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an … CWE-120
Classic Buffer Overflow
CVE-2026-30652 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
2967 6.3 MEDIUM
Network
vivotek fd8136_firmware A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized n1… CWE-121
Stack-based Buffer Overflow
CVE-2026-35716 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
2968 6.5 MEDIUM
Network
vivotek fd8136_firmware A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted … CWE-22
Path Traversal
CVE-2026-35718 2026-06-4 03:39 2026-06-3 Show GitHub Exploit DB Packet Storm
2969 9.9 CRITICAL
Network
oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc… CWE-400
CWE-284
 Uncontrolled Resource Consumption
Improper Access Control
CVE-2026-46775 2026-06-4 03:35 2026-05-29 Show GitHub Exploit DB Packet Storm
2970 9.6 CRITICAL
Network
jpettitt meshcore_card MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect … CWE-79
Cross-site Scripting
CVE-2026-45323 2026-06-4 03:34 2026-05-29 Show GitHub Exploit DB Packet Storm