Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205641 2.4
Physics
アップル - Apple iOS の Siri における重要な連絡先および写真情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-1852 2016-05-24 13:40 2016-05-16 Show GitHub Exploit DB Packet Storm
205642 4.6 警告
Physics
アップル - Apple OS X の画面ロック機能におけるロック画面の状態で失効したパスワードをリセットされる脆弱性 CWE-noinfo
情報不足
CVE-2016-1851 2016-05-24 13:40 2016-05-16 Show GitHub Exploit DB Packet Storm
205643 7.8 重要
Local
アップル - Apple OS X の SceneKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1850 2016-05-24 13:40 2016-05-16 Show GitHub Exploit DB Packet Storm
205644 3.3
Local
アップル - Apple iOS などの製品で使用される Safari の「履歴と Web サイトデータを消去」機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-1849 2016-05-24 13:40 2016-05-16 Show GitHub Exploit DB Packet Storm
205645 7.8 重要
Local
アップル - Apple OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1848 2016-05-24 13:40 2016-05-16 Show GitHub Exploit DB Packet Storm
205646 8.8 重要
Network
アップル - 複数の Apple 製品で使用される OpenGL における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1847 2016-05-24 13:40 2016-05-16 Show GitHub Exploit DB Packet Storm
205647 5.3 警告
Network
アップル - Apple OS X のメッセージコンポーネントにおける連絡先リストを変更される脆弱性 CWE-Other
その他
CVE-2016-1844 2016-05-23 18:26 2016-05-16 Show GitHub Exploit DB Packet Storm
205648 7.5 重要
Network
アップル - Apple OS X のメッセージコンポーネントにおける重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1843 2016-05-23 18:26 2016-05-16 Show GitHub Exploit DB Packet Storm
205649 7.5 重要
Network
アップル - 複数の Apple 製品の MapKit における重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2016-1842 2016-05-23 18:26 2016-05-16 Show GitHub Exploit DB Packet Storm
205650 7.8 重要
Local
アップル - Apple OS X のカーネルの dtrace の実装における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-1826 2016-05-23 18:26 2016-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1211 7.5 HIGH
Network
prefect prefect In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication mid… CWE-863
 Incorrect Authorization
CVE-2026-3514 2026-06-4 02:08 2026-06-2 Show GitHub Exploit DB Packet Storm
1212 6.5 MEDIUM
Network
lfprojects mlflow MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlfl… CWE-284
Improper Access Control
CVE-2026-3198 2026-06-4 02:07 2026-06-2 Show GitHub Exploit DB Packet Storm
1213 4.3 MEDIUM
Network
elabftw elabftw eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the … CWE-200
Information Exposure
CVE-2026-28511 2026-06-4 02:06 2026-06-2 Show GitHub Exploit DB Packet Storm
1214 4.3 MEDIUM
Network
nextcloud nextcloud_server Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, and 33.0.0 to before 33.0.1, the files_lock app did not properly validate the ow… CWE-287
Improper Authentication
CVE-2026-45283 2026-06-4 02:02 2026-06-2 Show GitHub Exploit DB Packet Storm
1215 5.5 MEDIUM
Local
google android In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no addition… CWE-20
 Improper Input Validation 
CVE-2026-0085 2026-06-4 02:02 2026-06-2 Show GitHub Exploit DB Packet Storm
1216 8.0 HIGH
Adjacent
google android In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow. This could lead to local escalati… CWE-190
 Integer Overflow or Wraparound
CVE-2026-0095 2026-06-4 02:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1217 7.8 HIGH
Local
google android In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalat… CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-0094 2026-06-4 02:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1218 7.8 HIGH
Local
google android In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n… CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-0093 2026-06-4 02:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1219 7.8 HIGH
Local
google android In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with no additional execut… CWE-269
 Improper Privilege Management
CVE-2026-0091 2026-06-4 01:59 2026-06-2 Show GitHub Exploit DB Packet Storm
1220 7.8 HIGH
Local
google android In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to local escalation of privilege with no a… CWE-269
 Improper Privilege Management
CVE-2026-0089 2026-06-4 01:59 2026-06-2 Show GitHub Exploit DB Packet Storm