Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206381 7.5 重要
Network
Debian
Sensio Labs
- Symfony の SecureRandom クラスの nextBytes 関数における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2016-1902 2016-06-6 16:11 2016-01-18 Show GitHub Exploit DB Packet Storm
206382 6.2 警告
Local
openSUSE project
Canonical
dosfstools project
- dosfstools の boot.c の read_boot 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-4804 2016-06-6 16:04 2016-04-28 Show GitHub Exploit DB Packet Storm
206383 6.2 警告
Local
openSUSE project
Canonical
dosfstools project
- dosfstools の fat.c の set_fat 関数における FAT12 ファイルシステムを破損される脆弱性 CWE-189
数値処理の問題
CVE-2015-8872 2016-06-6 16:04 2015-09-12 Show GitHub Exploit DB Packet Storm
206384 9.8 緊急
Network
シスコシステムズ - Cisco Prime Network Analysis Module および Prime Virtual Network Analysis Module における任意の OS コマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-1388 2016-06-6 15:26 2016-06-1 Show GitHub Exploit DB Packet Storm
206385 5.3 警告
Network
シスコシステムズ - Cisco Prime Network Analysis Module におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1370 2016-06-6 15:26 2016-06-1 Show GitHub Exploit DB Packet Storm
206386 6.1 警告
Network
サイボウズ - サイボウズ Office におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-7795
CVE-2015-7796
CVE-2015-7797
CVE-2015-7798
CVE-2016-1149
CVE-2016-1150
2016-06-6 14:58 2016-02-15 Show GitHub Exploit DB Packet Storm
206387 7.5 重要
Network
GNU Project
Canonical
Fedora Project
- GNU C Library の getnetbyname 関数の nss_dns の実装におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3075 2016-06-6 13:55 2016-03-29 Show GitHub Exploit DB Packet Storm
206388 7.5 重要
Network
GNU Project
Fedora Project
- GNU C Library の glob の実装におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1234 2016-06-6 13:55 2016-05-4 Show GitHub Exploit DB Packet Storm
206389 7.8 重要
Local
Docker
openSUSE project
Open Container Project
- Docker で使用される runC の libcontainer/user/user.go における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3697 2016-06-6 11:37 2016-04-13 Show GitHub Exploit DB Packet Storm
206390 9.1 緊急
Network
Apache Software Foundation - Apache Qpid Java の複数の AMQP 接続処理における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2016-4432 2016-06-3 14:29 2016-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2721 8.5 HIGH
Network
- - Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal network requests by creating FHI… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-49120 2026-06-5 01:10 2026-06-3 Show GitHub Exploit DB Packet Storm
2722 8.8 HIGH
Adjacent
- - BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitti… CWE-94
Code Injection
CVE-2026-49143 2026-06-5 01:10 2026-06-3 Show GitHub Exploit DB Packet Storm
2723 6.5 MEDIUM
Adjacent
- - BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to read arbitrary files.… CWE-22
Path Traversal
CVE-2026-49144 2026-06-5 01:10 2026-06-3 Show GitHub Exploit DB Packet Storm
2724 5.9 MEDIUM
Network
- - QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by exploiting the use of MD5 for password ha… CWE-916
 Use of Password Hash With Insufficient Computational Effort
CVE-2026-25861 2026-06-5 01:10 2026-06-3 Show GitHub Exploit DB Packet Storm
2725 3.6 LOW
Local
- - A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the component DataFrame Hash Han… CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash
CVE-2026-10766 2026-06-5 01:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2726 5.3 MEDIUM
Network
- - OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's email address. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-10597 2026-06-5 01:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2727 4.3 MEDIUM
Network
- - A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL … CWE-400
CWE-404
 Uncontrolled Resource Consumption
 Improper Resource Shutdown or Release
CVE-2026-10802 2026-06-5 01:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2728 - - - authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, the SAML source response processor (ResponseProcessor.parse()) does not validate the Conditions element on ass… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-41577 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
2729 - - - authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check rather than proper UR… CWE-601
Open Redirect
CVE-2026-41569 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm
2730 9.3 CRITICAL
Network
- - authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make the interface more comp… CWE-79
Cross-site Scripting
CVE-2026-42849 2026-06-5 00:49 2026-06-3 Show GitHub Exploit DB Packet Storm