Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204981 7.5 重要
Network
- HPE Matrix Operating Environment および Systems Insight Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2027 2016-06-10 14:52 2016-05-25 Show GitHub Exploit DB Packet Storm
204982 7.5 重要
Network
- HPE Matrix Operating Environment および Systems Insight Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2026 2016-06-10 14:52 2016-05-25 Show GitHub Exploit DB Packet Storm
204983 7.5 重要
Network
- HPE Insight Control サーバ配備における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2016-4365 2016-06-10 14:49 2016-05-25 Show GitHub Exploit DB Packet Storm
204984 8.4 重要
Local
- HPE Insight Control サーバ配備における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2016-4364 2016-06-10 14:49 2016-05-25 Show GitHub Exploit DB Packet Storm
204985 6.1 警告
Network
- HPE Insight Control サーバ配備におけるデータを変更される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4363 2016-06-10 14:49 2016-05-25 Show GitHub Exploit DB Packet Storm
204986 8.1 重要
Network
- HPE Insight Control サーバ配備における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2016-4362 2016-06-10 14:49 2016-05-25 Show GitHub Exploit DB Packet Storm
204987 6.5 警告
Local
Xen プロジェクト - Xen の arch/arm/p2m.c の p2m_teardown 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5242 2016-06-10 14:40 2016-06-3 Show GitHub Exploit DB Packet Storm
204988 7.5 重要
Network
F5 Networks - F5 BIG-IP の仮想サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4545 2016-06-10 14:37 2016-06-3 Show GitHub Exploit DB Packet Storm
204989 8.8 重要
Network
openSUSE project
7-Zip
- 7zip の Archive/Udf/UdfIn.cpp の CInArchive::ReadFileItem メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2335 2016-06-10 14:02 2016-06-1 Show GitHub Exploit DB Packet Storm
204990 8.1 重要
Network
Apache Software Foundation - Apache Shiro における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-4437 2016-06-10 14:00 2016-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 8.1 HIGH
Network
- - HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site v… New CWE-1027
CVE-2025-59874 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
1002 - - - An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. Update CWE-79
Cross-site Scripting
CVE-2026-5385 2026-06-5 00:23 2026-06-3 Show GitHub Exploit DB Packet Storm
1003 - - - An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and trigger unescaped rendering in the … New CWE-79
Cross-site Scripting
CVE-2026-42839 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm
1004 - - - An authenticated user can persist arbitrary HTML/JavaScript in the email_id or mobile_no fields of a Customer record and trigger unescaped rendering in the Point of Sale (POS) interface for every ope… New CWE-79
Cross-site Scripting
CVE-2026-42840 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm
1005 - - - Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event… Update CWE-674
 Uncontrolled Recursion
CVE-2026-8936 2026-06-5 00:21 2026-06-3 Show GitHub Exploit DB Packet Storm
1006 5.3 MEDIUM
Network
- - daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unauthenticated remote a… Update CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44545 2026-06-5 00:21 2026-06-3 Show GitHub Exploit DB Packet Storm
1007 3.7 LOW
Network
- - daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or … Update CWE-444
HTTP Request Smuggling
CVE-2026-44546 2026-06-5 00:21 2026-06-3 Show GitHub Exploit DB Packet Storm
1008 - - - Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj… New CWE-93
CRLF Injection
CVE-2026-8722 2026-06-5 00:21 2026-06-4 Show GitHub Exploit DB Packet Storm
1009 7.5 HIGH
Network
- - HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV retu… New CWE-416
 Use After Free
CVE-2026-8829 2026-06-5 00:21 2026-06-4 Show GitHub Exploit DB Packet Storm
1010 7.5 HIGH
Network
- - Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to a Denial o… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-46638 2026-06-5 00:21 2026-06-4 Show GitHub Exploit DB Packet Storm