Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204591 2.9
Local
日立
オラクル
- 複数の Oracle Java 製品における Networking に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3485 2016-08-2 15:51 2016-07-19 Show GitHub Exploit DB Packet Storm
204592 7.8 重要
Local
Novell - Novell Filr における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1611 2016-08-2 13:41 2016-06-9 Show GitHub Exploit DB Packet Storm
204593 7.5 重要
Network
Novell - Novell Filr の電子メールのテンプレート機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1610 2016-08-2 13:41 2016-07-20 Show GitHub Exploit DB Packet Storm
204594 5.4 警告
Network
Novell - Novell Filr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1609 2016-08-2 13:41 2016-07-20 Show GitHub Exploit DB Packet Storm
204595 8.8 重要
Network
Novell - Novell Filr の vaconfig/time における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-1608 2016-08-2 13:41 2016-07-20 Show GitHub Exploit DB Packet Storm
204596 7.2 重要
Network
Novell - Novell Filr の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1607 2016-08-2 13:41 2016-07-21 Show GitHub Exploit DB Packet Storm
204597 6.5 警告
Network
MIT Kerberos - MIT Kerberos 5 の鍵配布センタの kdc_util.c の validate_as_request 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3120 2016-08-2 11:36 2016-07-20 Show GitHub Exploit DB Packet Storm
204598 6.5 警告
Network
NetIQ - NetIQ Sentinel のサーバの ReportViewServlet サーブレットにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1605 2016-08-2 11:21 2016-07-2 Show GitHub Exploit DB Packet Storm
204599 8.8 重要
Network
Google - Google Chrome の midgard/mali_kbase_vinstr.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5138 2016-08-2 11:11 2016-07-26 Show GitHub Exploit DB Packet Storm
204600 7.5 重要
Network
シスコシステムズ - Cisco E メール セキュリティ アプライアンス デバイス上で稼動する AsyncOS におけるマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1461 2016-08-2 10:47 2016-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1861 9.1 CRITICAL
Network
- - A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-4035 2026-06-5 00:25 2026-06-3 Show GitHub Exploit DB Packet Storm
1862 6.1 MEDIUM
Network
- - A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use o… CWE-346
 Origin Validation Error
CVE-2026-6657 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
1863 - - - A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: ver… CWE-250
 Execution with Unnecessary Privileges
CVE-2025-12694 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
1864 8.1 HIGH
Network
- - HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site v… CWE-1027
CVE-2025-59874 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
1865 - - - An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. CWE-79
Cross-site Scripting
CVE-2026-5385 2026-06-5 00:23 2026-06-3 Show GitHub Exploit DB Packet Storm
1866 - - - An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and trigger unescaped rendering in the … CWE-79
Cross-site Scripting
CVE-2026-42839 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm
1867 - - - An authenticated user can persist arbitrary HTML/JavaScript in the email_id or mobile_no fields of a Customer record and trigger unescaped rendering in the Point of Sale (POS) interface for every ope… CWE-79
Cross-site Scripting
CVE-2026-42840 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm
1868 - - - Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event… CWE-674
 Uncontrolled Recursion
CVE-2026-8936 2026-06-5 00:21 2026-06-3 Show GitHub Exploit DB Packet Storm
1869 5.3 MEDIUM
Network
- - daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unauthenticated remote a… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44545 2026-06-5 00:21 2026-06-3 Show GitHub Exploit DB Packet Storm
1870 3.7 LOW
Network
- - daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or … CWE-444
HTTP Request Smuggling
CVE-2026-44546 2026-06-5 00:21 2026-06-3 Show GitHub Exploit DB Packet Storm