Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205561 7.2 重要
Network
dotCMS - dotCMS の Workflow Screen における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-4040 2016-04-27 16:34 2016-04-12 Show GitHub Exploit DB Packet Storm
205562 7.8 重要
Local
Google - Android の rootdir/init.rc における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2420 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
205563 7.8 重要
Local
Google - Android の System_server で使用される Skia の include/core/SkPostConfig.h における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2412 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
205564 5.3 警告
Network
Magento, Inc. - Magento Enterprise Edition および Community Edition の app/code/core/Mage/Rss/Helper/Order.php における重要な注文情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2212 2016-04-27 16:08 2016-02-23 Show GitHub Exploit DB Packet Storm
205565 8.1 重要
Network
Drupal
Debian
- Drupal の File モジュールにおけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-3162 2016-04-27 15:43 2016-02-24 Show GitHub Exploit DB Packet Storm
205566 8.1 重要
Network
Apache Software Foundation - Apache Camel における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2015-5348 2016-04-27 15:26 2015-11-12 Show GitHub Exploit DB Packet Storm
205567 8.4 重要
Local
NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおける重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-2558 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
205568 8.4 重要
Local
NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおけるカーネルメモリから重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2557 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
205569 5.3 警告
Network
OpenStack - OpenStack Compute の libvirt ドライバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-2140 2016-04-27 12:25 2016-03-8 Show GitHub Exploit DB Packet Storm
205570 6.2 警告
Local
FreeBSD - FreeBSD の sys/amd64/amd64/sys_machdep.c の amd64_set_ldt 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-1885 2016-04-27 11:52 2016-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 5.0 MEDIUM
Network
- - The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a malicious link, the attacke… New CWE-352
 Origin Validation Error
CVE-2026-49433 2026-06-2 22:04 2026-06-2 Show GitHub Exploit DB Packet Storm
622 - - - In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no additional executi… New CWE-285
Improper Authorization
CVE-2026-0072 2026-06-2 22:04 2026-06-2 Show GitHub Exploit DB Packet Storm
623 - - - Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures lead… New CWE-1220
 Insufficient Granularity of Access Control
CVE-2021-46747 2026-06-2 22:04 2026-06-2 Show GitHub Exploit DB Packet Storm
624 8.4 HIGH
Local
- - In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. U… New CWE-190
 Integer Overflow or Wraparound
CVE-2025-48595 2026-06-2 22:04 2026-06-2 Show GitHub Exploit DB Packet Storm
625 6.3 MEDIUM
Network
- - A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of the file src/index.ts of the component get_build_status/get_build_log/trigger_bu… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10276 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
626 6.3 MEDIUM
Network
- - A vulnerability was determined in ishayoyo excel-mcp up to 1.0.2. Impacted is an unknown function of the file src/index.ts of the component read_file/write_file. Executing a manipulation of the argum… New CWE-22
Path Traversal
CVE-2026-10278 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
627 6.3 MEDIUM
Network
- - A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affects the function saveToDisk of the file src/tools/gmail.ts of the component MCP G… New CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-10277 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
628 6.3 MEDIUM
Network
- - A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the file src/wezterm_executor.ts of the component switch_pane/write_to_specific_pan… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10279 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
629 7.3 HIGH
Network
- - A security flaw has been discovered in horizon921 mcpilot 0.1.0. The impacted element is an unknown function of the file client/src/app/api/mcp/call/route.ts of the component MCP API Call Endpoint. T… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10280 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
630 7.3 HIGH
Network
- - A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of the file src/embedded-server.ts of the component API Endpoint. This manipulation … New CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
CVE-2026-10281 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm