Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205961 8.1 重要
Network
シスコシステムズ - Cisco Prime Infrastructure および Evolved Programmable Network Manager の Web API における RBAC 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1290 2016-04-8 15:16 2016-04-6 Show GitHub Exploit DB Packet Storm
205962 5.9 警告
Network
シスコシステムズ - Cisco Mobility Services Engine 8710 デバイス上で稼動する TelePresence Server のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1346 2016-04-8 15:14 2016-04-6 Show GitHub Exploit DB Packet Storm
205963 7.5 重要
Network
シスコシステムズ - 複数のデバイス上で稼動する Cisco TelePresence Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-6313 2016-04-8 15:14 2015-08-17 Show GitHub Exploit DB Packet Storm
205964 7.5 重要
Network
シスコシステムズ - 複数のデバイス上で稼動する Cisco TelePresence Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-6312 2016-04-8 15:14 2015-08-17 Show GitHub Exploit DB Packet Storm
205965 6.5 警告
Network
デジタル - 複数の Pro-face GP-Pro EX 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-2292 2016-04-8 14:52 2016-04-5 Show GitHub Exploit DB Packet Storm
205966 6.5 警告
Network
デジタル - 複数の Pro-face GP-Pro EX 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-2291 2016-04-8 14:52 2016-04-5 Show GitHub Exploit DB Packet Storm
205967 8.8 重要
Network
デジタル - 複数の Pro-face GP-Pro EX 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-2290 2016-04-8 14:52 2016-04-5 Show GitHub Exploit DB Packet Storm
205968 9.1 緊急
Network
デジタル - 複数の Pro-face GP-Pro EX 製品の FTP サーバにおける認証を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2015-7921 2016-04-8 14:52 2015-10-22 Show GitHub Exploit DB Packet Storm
205969 6.3 警告
Local
Rockwell Automation - Rockwell Automation Integrated Architecture Builder の IAB.exe における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-2277 2016-04-8 14:47 2016-04-5 Show GitHub Exploit DB Packet Storm
205970 6.8 警告
Network
NetApp - NetApp Clustered Data ONTAP におけるサーバになりすまされる脆弱性 CWE-20
CWE-200
CVE-2016-1563 2016-04-8 14:36 2016-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
911 5.3 MEDIUM
Network
- - Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client. Update CWE-839
 Numeric Range Comparison Without Minimum Check
CVE-2026-48840 2026-06-2 03:12 2026-05-30 Show GitHub Exploit DB Packet Storm
912 5.7 MEDIUM
Network
- - An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. Th… New CWE-200
CWE-269
Information Exposure
 Improper Privilege Management
CVE-2026-48210 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
913 5.7 MEDIUM
Network
- - An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS… New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-48187 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
914 9.1 CRITICAL
Network
- - An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue o… New CWE-20
 Improper Input Validation 
CVE-2026-48188 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
915 5.7 MEDIUM
Network
- - An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled a… New CWE-200
Information Exposure
CVE-2026-48189 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
916 3.5 LOW
Network
- - An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be… New CWE-276
Incorrect Default Permissions 
CVE-2026-48190 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
917 3.5 LOW
Network
- - An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA an… New CWE-276
Incorrect Default Permissions 
CVE-2026-48191 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
918 6.5 MEDIUM
Network
- - An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to… New CWE-400
CWE-791
 Uncontrolled Resource Consumption
 Incomplete Filtering of Special Elements
CVE-2026-48208 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
919 7.1 HIGH
Network
- - An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting (XSS) attacks via … New CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output
CVE-2026-48209 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
920 7.8 HIGH
Local
- - A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatte… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-10118 2026-06-2 03:12 2026-06-2 Show GitHub Exploit DB Packet Storm