Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205111 9.8 緊急
Network
Google - Android のメディアサーバの H.264 デコーダにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-3741 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205112 9.8 緊急
Network
Google - Android のメディアサーバの libstagefright の DRMExtractor.cpp における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-2506 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205113 7.8 重要
Local
Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm GPU ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2503 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205114 7.8 重要
Local
Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm USB ドライバの drivers/usb/gadget/f_serial.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2502 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205115 7.8 重要
Local
Google - 複数の Nexus デバイス上で稼動する Android の Qualcomm カメラドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2501 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205116 7.8 重要
Local
Google
Linux
- MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の MSM QDSP6 オーディオドライバにおける権限を取得される脆弱性 CWE-119
CWE-189
CVE-2016-2068 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205117 7.8 重要
Local
Google
Linux
- MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の MSM グラフィックスドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2067 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205118 5.5 警告
Local
Google - Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm ブートローダの app/aboot/aboot.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-8893 2016-07-13 16:54 2016-07-6 Show GitHub Exploit DB Packet Storm
205119 7.8 重要
Local
Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm コンポーネントの platform/msm_shared/boot_verifier.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8892 2016-07-13 16:53 2016-07-6 Show GitHub Exploit DB Packet Storm
205120 7.8 重要
Local
Google - Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの app/aboot/aboot.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-8891 2016-07-13 16:53 2016-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1041 4.9 MEDIUM
Network
openstack ironic OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template. CWE-669
 Incorrect Resource Transfer Between Spheres
CVE-2026-44917 2026-06-5 03:40 2026-06-4 Show GitHub Exploit DB Packet Storm
1042 8.1 HIGH
Network
openstack ironic OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image. CWE-23
 Relative Path Traversal
CVE-2026-48681 2026-06-5 03:40 2026-06-4 Show GitHub Exploit DB Packet Storm
1043 5.9 MEDIUM
Local
libexpat_project libexpat libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.… CWE-416
 Use After Free
CVE-2026-50219 2026-06-5 03:39 2026-06-4 Show GitHub Exploit DB Packet Storm
1044 7.5 HIGH
Network
solarwinds web_help_desk SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-28299 2026-06-5 03:39 2026-06-3 Show GitHub Exploit DB Packet Storm
1045 4.3 MEDIUM
Network
hcltech icontrol HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain… CWE-209
Information Exposure Through an Error Message
CVE-2025-52606 2026-06-5 03:38 2026-06-4 Show GitHub Exploit DB Packet Storm
1046 4.3 MEDIUM
Network
hcltech icontrol HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path… CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2025-52608 2026-06-5 03:38 2026-06-4 Show GitHub Exploit DB Packet Storm
1047 4.3 MEDIUM
Network
mozilla firefox JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. CWE-843
Type Confusion
CVE-2026-10702 2026-06-5 03:38 2026-06-3 Show GitHub Exploit DB Packet Storm
1048 5.3 MEDIUM
Network
openquantumsafe liboqs liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT … CWE-125
Out-of-bounds Read
CVE-2026-46344 2026-06-5 03:38 2026-05-30 Show GitHub Exploit DB Packet Storm
1049 5.3 MEDIUM
Network
openquantumsafe liboqs liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT … CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read
CVE-2026-44518 2026-06-5 03:36 2026-05-30 Show GitHub Exploit DB Packet Storm
1050 5.3 MEDIUM
Network
hcltech icontrol HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers. CWE-693
 Protection Mechanism Failure
CVE-2025-52609 2026-06-5 03:34 2026-06-4 Show GitHub Exploit DB Packet Storm