Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207101 8.6 重要
Network 		WordPress.org - WordPress の wp-includes/http.php の wp_http_validate_url 関数におけるサーバサイドのリクエストフォージェリ攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2016-2222 2016-05-25 16:57 2016-02-2 Show GitHub Exploit DB Packet Storm
207102 7.4 重要
Network 		WordPress.org - WordPress の wp-includes/pluggable.php の wp_validate_redirect 関数におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2016-2221 2016-05-25 16:57 2016-02-2 Show GitHub Exploit DB Packet Storm
207103 6.1 警告
Network 		WordPress.org - WordPress の wp-includes/class-wp-theme.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1564 2016-05-25 16:57 2016-01-6 Show GitHub Exploit DB Packet Storm
207104 6.1 警告
Network 		WordPress.org - WordPress の wp-includes/wp-db.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8834 2016-05-25 16:57 2015-05-6 Show GitHub Exploit DB Packet Storm
207105 5.4 警告
Network 		WordPress.org - WordPress のユーザリストのテーブルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-7989 2016-05-25 16:57 2015-09-15 Show GitHub Exploit DB Packet Storm
207106 4.3 警告
Network 		WordPress.org - WordPress の XMLRPC サブシステムの wp-includes/class-wp-xmlrpc-server.php の mw_editPost 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5715 2016-05-25 16:57 2015-09-15 Show GitHub Exploit DB Packet Storm
207107 4.3 警告
Network 		The PHP Group
Facebook		 - PHP の ext/zip/php_zip.c および HHVM の ext/zip/ext_zip.cpp の ZipArchive::extractTo 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-9767 2016-05-25 16:55 2014-09-10 Show GitHub Exploit DB Packet Storm
207108 9.8 緊急
Network 		The PHP Group - PHP の ext/standard/string.c の str_pad 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2016-4346 2016-05-25 16:28 2016-03-3 Show GitHub Exploit DB Packet Storm
207109 9.8 緊急
Network 		The PHP Group - PHP の ext/filter/sanitizing_filters.c の php_filter_encode_url 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2016-4345 2016-05-25 16:28 2016-03-3 Show GitHub Exploit DB Packet Storm
207110 9.8 緊急
Network 		The PHP Group - PHP の ext/xml/xml.c の xml_utf8_encode 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2016-4344 2016-05-25 16:28 2016-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3791 7.2 HIGH
Physics 		qualcomm ar8031_firmware
ar8035_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
qmp1000_firmware
qmp2001_firmware
qpa1083bd_firmware
qpa1086bd_firmware
qrb5165n_firmware<… 		Memory corruption while processing fastboot commands with invalid input. CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-24089 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3792 7.1 HIGH
Local 		qualcomm ar8031_firmware
ar8035_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
sm6850_firmware
sm7435_firmware
sm7435p_firmware
sm7525_firmware
sm7550_firmware
sm7550… 		Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. CWE-306
Missing Authentication for Critical Function 		CVE-2026-24090 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3793 7.2 HIGH
Physics 		qualcomm c-v2x_9150_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
cq8750m_firmware
csra6620_firmware
csra6640_firmware
csrb31024_firmware
fastconnect_6200_firmware
fast… 		Memory corruption while processing fastboot commands with improperly formatted input. CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-24091 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3794 7.2 HIGH
Physics 		qualcomm ar8031_firmware
ar8035_firmware
cologne_firmware
cq7790_firmware
cq8725s_firmware
cq8750m_firmware
csra6620_firmware
csra6640_firmware
fastconnect_6200_firmware
fastconnect… 		Memory Corruption when processing fastboot commands to set display mode. CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-24092 2026-06-3 00:25 2026-06-2 Show GitHub Exploit DB Packet Storm
3795 9.8 CRITICAL
Network 		langflow langflow IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction. CWE-22
Path Traversal 		CVE-2026-7524 2026-06-3 00:24 2026-05-27 Show GitHub Exploit DB Packet Storm
3796 7.8 HIGH
Local 		qualcomm cologne_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
iqx5121_firmware
iqx7181_firmware
qca0000_firmware
sc8380xp_firmware
wcd9378c_firmware
wcd9380_firmware 		Memory corruption while processing IOCTL calls for escape operations. CWE-125
Out-of-bounds Read 		CVE-2026-25258 2026-06-3 00:23 2026-06-2 Show GitHub Exploit DB Packet Storm
3797 7.8 HIGH
Local 		qualcomm cologne_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
iqx5121_firmware
iqx7181_firmware
qca0000_firmware
qcm5430_firmware
qcm6490_firm… 		Memory corruption while processing multiple IOCTL command for escape operations. CWE-787
 Out-of-bounds Write 		CVE-2026-25259 2026-06-3 00:22 2026-06-2 Show GitHub Exploit DB Packet Storm
3798 7.0 HIGH
Local 		qualcomm cologne_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
qcm5430_firmware
qcm6490_firmware
video_collaboration_vc3_platform_firmware
sc8380x… 		Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-25260 2026-06-3 00:22 2026-06-2 Show GitHub Exploit DB Packet Storm
3799 7.5 HIGH
Network 		langflow langflow IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption. CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-7528 2026-06-3 00:20 2026-05-27 Show GitHub Exploit DB Packet Storm
3800 8.8 HIGH
Network 		ibm controller IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to… CWE-798
 Use of Hard-coded Credentials 		CVE-2026-5065 2026-06-3 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm