Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205761 8.8 重要
Network 		Google - Google Chrome で使用される Google V8 の LoadBuffer の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-1653 2016-04-26 18:05 2016-04-13 Show GitHub Exploit DB Packet Storm
205762 8.1 重要
Network 		Google - Google Chrome で使用される PDFium の fxcodec/codec/fx_codec_jpx_opj.cpp におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-1651 2016-04-26 18:05 2016-04-13 Show GitHub Exploit DB Packet Storm
205763 8.8 重要
Network 		Debian
OptiPNG		 - OptiPNG の pngxrbmp.c の bmp_rle4_fread 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-3982 2016-04-26 17:17 2016-01-3 Show GitHub Exploit DB Packet Storm
205764 8.8 重要
Network 		openSUSE project
The Cacti Group		 - Cacti の auth_login.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2313 2016-04-26 16:55 2016-02-21 Show GitHub Exploit DB Packet Storm
205765 9.8 緊急
Network 		GNU Project
Debian
openSUSE project
SUSE		 - GNU C Library の catopen 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8779 2016-04-26 16:50 2015-08-8 Show GitHub Exploit DB Packet Storm
205766 9.8 緊急
Network 		GNU Project
Debian
openSUSE project
SUSE		 - GNU C Library における整数オーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8778 2016-04-26 16:50 2015-08-25 Show GitHub Exploit DB Packet Storm
205767 9.1 緊急
Network 		GNU Project
Debian
openSUSE project
SUSE		 - GNU C Library の strftime 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2015-8776 2016-04-26 16:50 2015-09-20 Show GitHub Exploit DB Packet Storm
205768 9.8 緊急
Network 		GNU Project
openSUSE project
SUSE		 - GNU C Library におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-9761 2016-04-26 16:50 2014-05-19 Show GitHub Exploit DB Packet Storm
205769 7.4 重要
Network 		F5 Networks - 複数の F5 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-2084 2016-04-26 16:45 2016-04-11 Show GitHub Exploit DB Packet Storm
205770 6.1 警告
Network 		レッドハット - Red Hat Satellite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-2103 2016-04-26 16:08 2016-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 6.3 MEDIUM
Network 		vivotek fd8136_firmware A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized n1… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-35716 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
1162 6.5 MEDIUM
Network 		vivotek fd8136_firmware A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted … Update CWE-22
Path Traversal 		CVE-2026-35718 2026-06-4 03:39 2026-06-3 Show GitHub Exploit DB Packet Storm
1163 9.9 CRITICAL
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc… Update CWE-400
CWE-284
 Uncontrolled Resource Consumption
Improper Access Control 		CVE-2026-46775 2026-06-4 03:35 2026-05-29 Show GitHub Exploit DB Packet Storm
1164 9.6 CRITICAL
Network 		jpettitt meshcore_card MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect … Update CWE-79
Cross-site Scripting 		CVE-2026-45323 2026-06-4 03:34 2026-05-29 Show GitHub Exploit DB Packet Storm
1165 4.3 MEDIUM
Network 		redhat build_of_keycloak A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit this flaw by accessing user-facing APIs, such as the account API or by requesting an OpenID Conne… Update CWE-863
 Incorrect Authorization 		CVE-2026-9791 2026-06-4 03:28 2026-05-28 Show GitHub Exploit DB Packet Storm
1166 7.5 HIGH
Network 		redhat build_of_keycloak A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing … Update CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-9793 2026-06-4 03:26 2026-05-28 Show GitHub Exploit DB Packet Storm
1167 7.5 HIGH
Adjacent 		tp-link tapo_l535e_firmware
tapo_p300_firmware
tapo_d100c_firmware 		TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase is transmitted in cleartext witho… Update CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-34126 2026-06-4 03:18 2026-05-29 Show GitHub Exploit DB Packet Storm
1168 7.3 HIGH
Network 		- - A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulation leads to injectio… Update CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure 		CVE-2026-10221 2026-06-4 03:16 2026-06-1 Show GitHub Exploit DB Packet Storm
1169 8.8 HIGH
Adjacent 		tp-link archer_c64_firmware Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web … Update CWE-288
CWE-306
Authentication Bypass Using an Alternate Path or Channel
Missing Authentication for Critical Function 		CVE-2026-8697 2026-06-4 03:14 2026-05-29 Show GitHub Exploit DB Packet Storm
1170 5.3 MEDIUM
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with networ… Update CWE-200
Information Exposure 		CVE-2026-46830 2026-06-4 03:12 2026-05-29 Show GitHub Exploit DB Packet Storm