Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206131 6.2 警告
Local
IBM - IBM Security Identity Manager 仮想アプライアンスにおける平文のパスワードを取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0338 2016-07-21 15:29 2016-06-20 Show GitHub Exploit DB Packet Storm
206132 7.3 重要
Network
IBM - IBM Security Identity Manager 仮想アプライアンスにおけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-0330 2016-07-21 15:29 2016-06-20 Show GitHub Exploit DB Packet Storm
206133 5.4 警告
Network
IBM - IBM BigFix Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0269 2016-07-21 15:29 2016-07-8 Show GitHub Exploit DB Packet Storm
206134 7.5 重要
Network
IBM - IBM Tivoli Directory Server および IBM Security Directory Server の Web 管理ツールにおけるディレクトリトラバーサルの脆弱性 CWE-200
情報漏えい
CVE-2015-1977 2016-07-21 15:29 2015-02-19 Show GitHub Exploit DB Packet Storm
206135 8.8 重要
Network
Accela, Inc. - Accela Civic Platform Citizen Access portal における任意のコードを実行される脆弱性 CWE-Other
CWE-Other
CVE-2016-5661 2016-07-20 17:24 2016-07-13 Show GitHub Exploit DB Packet Storm
206136 6.1 警告
Network
Accela, Inc. - Accela Civic Platform Citizen Access portal の AttachmentsList.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5660 2016-07-20 17:24 2016-07-13 Show GitHub Exploit DB Packet Storm
206137 9.8 緊急
Network
Debian
レッドハット
- libvirt における認証を回避される脆弱性 CWE-Other
その他
CVE-2016-5008 2016-07-20 16:52 2016-06-30 Show GitHub Exploit DB Packet Storm
206138 4.9 警告
Network
フォーティネット - Fortinet FortiWeb におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-5092 2016-07-20 15:56 2016-05-26 Show GitHub Exploit DB Packet Storm
206139 8.8 重要
Network
フォーティネット - Fortinet FortiWeb におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4066 2016-07-20 15:56 2016-06-23 Show GitHub Exploit DB Packet Storm
206140 4.3 警告
Physics
シトリックス・システムズ - Citrix Worx Home for iOS および XenMobile MDX Toolkit for iOS におけるアプリケーション内の Apple Touch ID 認証を回避される脆弱性 CWE-Other
その他
CVE-2016-5109 2016-07-20 15:50 2016-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2971 6.3 MEDIUM
Network
- - A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c). When the TLS session cache is enabled, tls_session_… CWE-787
 Out-of-bounds Write
CVE-2026-5066 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2972 4.5 MEDIUM
Local
- - In Mimecast Incydr before 2.6.0, arbitrary file access can occur. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-50590 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2973 7.3 HIGH
Local
- - Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range. CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-50593 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2974 6.3 MEDIUM
Local
- - NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can e… CWE-798
 Use of Hard-coded Credentials
CVE-2026-21404 2026-06-6 01:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2975 - - - A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution. CWE-284
Improper Access Control
CVE-2026-48907 2026-06-6 01:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2976 6.3 MEDIUM
Network
- - Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating… CWE-79
Cross-site Scripting
CVE-2025-65640 2026-06-6 01:04 2026-06-5 Show GitHub Exploit DB Packet Storm
2977 5.3 MEDIUM
Network
- - HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a database on the client … CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2020-25900 2026-06-6 01:04 2026-06-6 Show GitHub Exploit DB Packet Storm
2978 6.3 MEDIUM
Network
- - A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. The impacted element is an unkno… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-11333 2026-06-6 01:04 2026-06-6 Show GitHub Exploit DB Packet Storm
2979 7.3 HIGH
Network
- - A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown function of the file d… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-11334 2026-06-6 01:04 2026-06-6 Show GitHub Exploit DB Packet Storm
2980 6.3 MEDIUM
Network
- - A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This impacts the function session_start of the file /… CWE-384
 Session Fixation
CVE-2026-11335 2026-06-6 01:04 2026-06-6 Show GitHub Exploit DB Packet Storm