Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204821 6.1 警告
Network 		アドビシステムズ - Adobe Brackets におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-4164 2016-06-20 16:49 2016-06-14 Show GitHub Exploit DB Packet Storm
204822 9.8 緊急
Network 		アドビシステムズ - Adobe DNG Software Development Kit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-4167 2016-06-20 16:25 2016-06-14 Show GitHub Exploit DB Packet Storm
204823 7.3 重要
Local 		アドビシステムズ - Windows 上で稼動する Adobe Creative Cloud デスクトップアプリケーションのインストーラーにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-4157 2016-06-20 16:13 2016-06-14 Show GitHub Exploit DB Packet Storm
204824 6.5 警告
Network 		Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2016-2825 2016-06-20 11:33 2016-06-7 Show GitHub Exploit DB Packet Storm
204825 8.8 重要
Network 		Mozilla Foundation - Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-2815 2016-06-20 11:33 2016-06-7 Show GitHub Exploit DB Packet Storm
204826 5.5 警告
Local 		Huawei - Android 用 Huawei Hilink APP における脆弱性 CWE-310
暗号の問題 		CVE-2016-4005 2016-06-20 11:15 2016-04-19 Show GitHub Exploit DB Packet Storm
204827 5.5 警告
Local 		マイクロソフト - 複数の Microsoft 製品におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-3234 2016-06-20 10:37 2016-06-14 Show GitHub Exploit DB Packet Storm
204828 7.3 重要
Local 		マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0025 2016-06-20 10:37 2016-06-14 Show GitHub Exploit DB Packet Storm
204829 5.5 警告
Local 		マイクロソフト - Microsoft Exchange Server の Outlook Web Access におけるユーザを追跡される脆弱性 CWE-200
情報漏えい 		CVE-2016-0028 2016-06-20 10:20 2016-06-14 Show GitHub Exploit DB Packet Storm
204830 7.8 重要
Local 		Google - Android One デバイス上で稼動する Android の MediaTek パワーマネジメントドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2492 2016-06-17 17:14 2016-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
911 - - - The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish r… New CWE-287
Improper Authentication 		CVE-2026-49186 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
912 - - - The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse. New CWE-200
Information Exposure 		CVE-2026-49187 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
913 - - - The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands. New CWE-489
Exposure of Data Element to Wrong Session  		CVE-2026-49188 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
914 - - - Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations. New CWE-269
 Improper Privilege Management 		CVE-2026-49189 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
915 - - - The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions. New CWE-78
OS Command  		CVE-2026-49190 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
916 - - - The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages. New CWE-287
Improper Authentication 		CVE-2026-49191 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
917 - - - The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-49192 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
918 - - - Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet. New CWE-200
Information Exposure 		CVE-2026-49193 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
919 - - - The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and directly enter an interactive shell interface. New CWE-287
Improper Authentication 		CVE-2026-49194 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
920 - - - Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft. New CWE-287
Improper Authentication 		CVE-2026-49202 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm