Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206121 7.5 重要
Network
Lenovo - Lenovo Accelerator Application の UpdateAgent における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-3944 2016-06-8 16:01 2016-05-31 Show GitHub Exploit DB Packet Storm
206122 5.5 警告
Local
Xen プロジェクト - Xen の libxl デバイスハンドリングにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-4963 2016-06-8 15:56 2016-06-2 Show GitHub Exploit DB Packet Storm
206123 7.8 重要
Local
Ansible
Fedora Project
- Ansible の lxc_container モジュールの create_script 関数における任意のファイルに書き込まれる脆弱性 CWE-20
不適切な入力確認
CVE-2016-3096 2016-06-8 15:41 2016-04-15 Show GitHub Exploit DB Packet Storm
206124 7.5 重要
Network
Debian
Canonical
Igor Sysoev
- nginx の os/unix/ngx_files.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-4450 2016-06-8 14:53 2016-05-31 Show GitHub Exploit DB Packet Storm
206125 9.8 緊急
Network
Debian
Zend Technologies Ltd.
- Zend Framework の PDO アダプタにおける任意の SQL コマンドを実行される脆弱性 CWE-89
SQLインジェクション
CVE-2015-7695 2016-06-8 13:51 2015-09-15 Show GitHub Exploit DB Packet Storm
206126 7.8 重要
Local
Debian
Canonical
Spice Project
レッドハット
- SPICE におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-5260 2016-06-8 12:26 2015-10-6 Show GitHub Exploit DB Packet Storm
206127 9.8 緊急
Network
Debian
FreeType Project
- FreeType の複数の関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-9746 2016-06-8 12:08 2014-01-23 Show GitHub Exploit DB Packet Storm
206128 7.8 重要
Local
シスコシステムズ - Cisco IP Phone 8800 のソフトウェアにおける OS コマンド実行の権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1403 2016-06-7 18:18 2016-06-3 Show GitHub Exploit DB Packet Storm
206129 8.8 重要
Network
シスコシステムズ - Cisco Prime Network Analysis Module および Prime Virtual Network Analysis Module における任意の OS コマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1391 2016-06-7 18:18 2016-06-1 Show GitHub Exploit DB Packet Storm
206130 6.7 警告
Local
DELL EMC (旧 EMC Corporation) - EMC Isilon OneFS における root のシェルへのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0908 2016-06-7 17:12 2016-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2341 - - - GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0.7, an authenticated user with config READ permission can read a specific asset… CWE-862
 Missing Authorization
CVE-2026-44281 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2342 6.5 MEDIUM
Network
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks. An external attacker can rebind a domain to the router's intern… CWE-350
 Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2026-36604 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2343 6.5 MEDIUM
Adjacent
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing a persistent crash that require… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-36605 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2344 7.1 HIGH
Local
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode. An attacker who obtains a backup file can decrypt… CWE-798
 Use of Hard-coded Credentials
CVE-2026-36606 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2345 8.8 HIGH
Adjacent
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks the rate limiting applied to th… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-36607 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2346 8.8 HIGH
Adjacent
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192.168.1.1) or local… CWE-441
Confused Deputy
CVE-2026-36608 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2347 7.3 HIGH
Network
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the predictable XOR-bas… CWE-327
CWE-341
 Use of a Broken or Risky Cryptographic Algorithm
 Predictable from Observable State
CVE-2026-36609 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2348 5.9 MEDIUM
Network
- - Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding. The firmware contains no TLS implementation, allowing man-in-the-mid… CWE-319
CWE-523
Cleartext Transmission of Sensitive Information
 Unprotected Transport of Credentials
CVE-2026-36610 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2349 7.3 HIGH
Network
- - Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposing internal memory t… CWE-200
Information Exposure
CVE-2026-36611 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2350 6.4 MEDIUM
Adjacent
- - Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 enables WPS 2.0 by default with a weak lockout policy (60-second lockout after 10 attempts). CWE-307
CWE-1188
mproper Restriction of Excessive Authentication Attempts
 Insecure Default Initialization of Resource
CVE-2026-36612 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm