Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205531 8.1 重要
Network
Huawei - Huawei Policy Center のソフトウェアにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-3675 2016-04-18 17:08 2016-03-25 Show GitHub Exploit DB Packet Storm
205532 8.8 重要
Network
Huawei - Huawei Policy Center のソフトウェアにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2405 2016-04-18 17:08 2016-02-17 Show GitHub Exploit DB Packet Storm
205533 5.5 警告
Local
Huawei - Huawei P8 スマートフォンのソフトウェアのグラフィックドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1496 2016-04-18 17:08 2016-01-13 Show GitHub Exploit DB Packet Storm
205534 7.8 重要
Local
Huawei - Huawei Mate S スマートフォンのソフトウェアのグラフィックドライバにおける整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1495 2016-04-18 17:08 2016-02-3 Show GitHub Exploit DB Packet Storm
205535 5.5 警告
Local
Huawei - Huawei Sophia-L10 スマートフォンのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8305 2016-04-18 17:08 2015-11-20 Show GitHub Exploit DB Packet Storm
205536 7.8 重要
Local
Huawei - Huawei P7 フォンのソフトウェアにおける整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8304 2016-04-18 17:08 2015-11-20 Show GitHub Exploit DB Packet Storm
205537 9.8 緊急
Network
Debian
Kamailio
- Kamailio の SEAS モジュールの encode_msg.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-2385 2016-04-18 16:53 2016-03-3 Show GitHub Exploit DB Packet Storm
205538 9.8 緊急
Network
SPIP
Debian
- SPIP の ecrire/inc/filtres.php の encoder_contexte_ajax 関数における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2016-3154 2016-04-18 16:22 2016-03-10 Show GitHub Exploit DB Packet Storm
205539 9.8 緊急
Network
SPIP
Debian
- SPIP における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2016-3153 2016-04-18 16:22 2016-03-10 Show GitHub Exploit DB Packet Storm
205540 7.5 重要
Network
アドビシステムズ - Adobe RoboHelp Server における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-1035 2016-04-18 16:14 2016-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261 - - - pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed out… New CWE-22
Path Traversal
CVE-2026-8643 2026-06-2 23:17 2026-06-2 Show GitHub Exploit DB Packet Storm
262 9.8 CRITICAL
Network
joomla joomla\! The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set. Update NVD-CWE-noinfo
CWE-319
Cleartext Transmission of Sensitive Information
CVE-2026-48902 2026-06-2 23:16 2026-05-27 Show GitHub Exploit DB Packet Storm
263 - - - RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, RustFS suffers from sensitive information leakage in log outputs. When the server is run with RUST_LOG=debug sensit… Update CWE-312
CWE-532
 Cleartext Storage of Sensitive Information
 Inclusion of Sensitive Information in Log Files
CVE-2026-45040 2026-06-2 23:16 2026-05-29 Show GitHub Exploit DB Packet Storm
264 7.5 HIGH
Network
portainer portainer Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before … Update CWE-598
Information Exposure Through Query Strings in GET Request 
CVE-2026-44883 2026-06-2 23:16 2026-05-29 Show GitHub Exploit DB Packet Storm
265 8.8 HIGH
Network
- - A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-42359 2026-06-2 23:16 2026-06-1 Show GitHub Exploit DB Packet Storm
266 - - - Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin privileges. Although the TenantResource RawItems processing logic forcibly sets th… New CWE-20
CWE-863
 Improper Input Validation 
 Incorrect Authorization
CVE-2026-22872 2026-06-2 23:16 2026-06-2 Show GitHub Exploit DB Packet Storm
267 7.8 HIGH
Local
- - In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of p… New CWE-693
 Protection Mechanism Failure
CVE-2026-0087 2026-06-2 23:16 2026-06-2 Show GitHub Exploit DB Packet Storm
268 7.8 HIGH
Local
- - In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no add… New CWE-693
 Protection Mechanism Failure
CVE-2026-0045 2026-06-2 23:16 2026-06-2 Show GitHub Exploit DB Packet Storm
269 7.8 HIGH
Local
- - In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution priv… New CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2026-0036 2026-06-2 23:16 2026-06-2 Show GitHub Exploit DB Packet Storm
270 6.2 MEDIUM
Local
- - In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti… New CWE-269
 Improper Privilege Management
CVE-2026-0009 2026-06-2 23:16 2026-06-2 Show GitHub Exploit DB Packet Storm