Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207241	9.8	緊急 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4166	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

207242	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4156	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

207243	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4155	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

207244	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4154	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

207245	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4153	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

207246	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4152	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

207247	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4151	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

207248	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4150	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

207249	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4149	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

207250	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4148	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3571	8.6	HIGH Network	axios	axios	Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-44492	2026-06-13 12:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

3572	7.5	HIGH Network	axios	axios	Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a …	CWE-200 Information Exposure	CVE-2026-44486	2026-06-13 12:16	2026-06-12	Show	GitHub Exploit DB Packet Storm

3573	8.8	HIGH Network	vim	vim	Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/a…	CWE-74 CWE-94 Injection Code Injection	CVE-2026-47162	2026-06-13 10:04	2026-06-12	Show	GitHub Exploit DB Packet Storm

3574	7.5	HIGH Network	apache	cxf	There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead to uncontrolled resource consumption or a denial of servic…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-50645	2026-06-13 10:00	2026-06-12	Show	GitHub Exploit DB Packet Storm

3575	8.3	HIGH Adjacent	google	chrome	Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traffic. (Chromium secur…	CWE-416 Use After Free	CVE-2026-12014	2026-06-13 09:54	2026-06-12	Show	GitHub Exploit DB Packet Storm

3576	5.3	MEDIUM Network	google	chrome	Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory …	CWE-416 Use After Free	CVE-2026-12015	2026-06-13 09:54	2026-06-12	Show	GitHub Exploit DB Packet Storm

3577	8.3	HIGH Network	google	chrome	Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf…	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-12016	2026-06-13 09:52	2026-06-12	Show	GitHub Exploit DB Packet Storm

3578	3.1	LOW Network	google	chrome	Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page…	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-12017	2026-06-13 09:51	2026-06-12	Show	GitHub Exploit DB Packet Storm

3579	8.3	HIGH Network	google	chrome	Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap…	CWE-787 Out-of-bounds Write	CVE-2026-12019	2026-06-13 09:45	2026-06-12	Show	GitHub Exploit DB Packet Storm

3580	8.8	HIGH Network	google	chrome	Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)	CWE-416 Use After Free	CVE-2026-12020	2026-06-13 09:34	2026-06-12	Show	GitHub Exploit DB Packet Storm