Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205291 6.5 警告
Network
Debian
OpenAFS
- OpenAFS の ptserver/ptprocs.c の newEntry 関数におけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-2860 2016-05-20 17:06 2016-03-16 Show GitHub Exploit DB Packet Storm
205292 8.1 重要
Network
Google - Android 上で稼働する Google Chrome におけるディレクトリトラバーサル攻撃を実行される脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1671 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
205293 5.3 警告
Network
Google - Google Chrome の content/browser/loader/resource_dispatcher_host_impl.cc における任意の HTTP リクエストを送信される脆弱性 CWE-362
競合状態
CVE-2016-1670 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
205294 8.8 重要
Network
Google - Google Chrome で使用される Google V8 の zone.cc の Zone::New 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1669 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
205295 8.8 重要
Network
Google - Google Chrome で使用される Blink の V8 バインディングにおける同一生成元ポリシーを回避される脆弱性 CWE-Other
その他
CVE-2016-1668 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
205296 8.8 重要
Network
Google - Google Chrome で使用される Blink の DOM の実装における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他
CVE-2016-1667 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
205297 6.5 警告
Network
IBM - IBM SPSS Statistics の ActiveX コントロールの Initialize 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8530 2016-05-20 15:13 2015-12-8 Show GitHub Exploit DB Packet Storm
205298 9.8 緊急
Network
meteocontrol - 複数の meteocontrol WEB'log 製品における重要な平文情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2298 2016-05-20 14:58 2016-05-12 Show GitHub Exploit DB Packet Storm
205299 9.4 緊急
Network
meteocontrol - 複数の meteocontrol WEB'log 製品における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-2297 2016-05-20 14:58 2016-05-12 Show GitHub Exploit DB Packet Storm
205300 9.4 緊急
Network
meteocontrol - 複数の meteocontrol WEB'log 製品における重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2016-2296 2016-05-20 14:58 2016-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 8.8 HIGH
Network
- - Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low) New CWE-416
 Use After Free
CVE-2026-11306 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
542 8.8 HIGH
Network
- - Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low) New CWE-416
 Use After Free
CVE-2026-11307 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
543 - - - A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio ra… New - CVE-2026-7762 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
544 - - - A heap-based buffer overflow vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio rang… New - CVE-2026-7763 2026-06-6 00:02 2026-06-5 Show GitHub Exploit DB Packet Storm
545 6.5 MEDIUM
Network
- - Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. New CWE-77
Command Injection
CVE-2026-42824 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
546 7.7 HIGH
Network
- - Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network. New CWE-77
Command Injection
CVE-2026-45497 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
547 6.5 MEDIUM
Network
- - Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a netw… New CWE-74
Injection
CVE-2026-47644 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
548 6.5 MEDIUM
Network
- - Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network. New CWE-200
Information Exposure
CVE-2026-47655 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
549 6.4 MEDIUM
Network
- - All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two entries with the same path - the first bei… New CWE-29
 Path Traversal: '\..\filename'
CVE-2026-10732 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
550 - - - Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files. New - CVE-2026-21017 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm