Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207981 6.1 警告
Network
IBM - IBM WebSphere Application Server における CRLF インジェクションの脆弱性 CWE-Other
その他
CVE-2016-0359 2016-07-8 16:04 2016-06-23 Show GitHub Exploit DB Packet Storm
207982 5.4 警告
Network
IBM - IBM Cognos Business Intelligence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0346 2016-07-8 16:04 2016-06-30 Show GitHub Exploit DB Packet Storm
207983 5.4 警告
Network
IBM - IBM Cognos Business Intelligence で使用される IBM Cognos TM1 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0221 2016-07-8 16:04 2016-06-30 Show GitHub Exploit DB Packet Storm
207984 7.3 重要
Network
Eaton - Eaton ELCSoft の ELCSimulator におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4512 2016-07-8 14:56 2016-06-30 Show GitHub Exploit DB Packet Storm
207985 6 警告
Network
Eaton - Eaton ELCSoft の elcsoft.exe におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4509 2016-07-8 14:56 2016-06-30 Show GitHub Exploit DB Packet Storm
207986 4.7 警告
Local
Linux - Linux Kernel の drivers/s390/char/sclp_ctl.c の sclp_ctl_ioctl_sccb 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-362
競合状態
CVE-2016-6130 2016-07-8 11:56 2016-04-26 Show GitHub Exploit DB Packet Storm
207987 7.1 重要
Local
Linux - Linux Kernel の netfilter サブシステムの IPT_SO_SET_REPLACE setsockopt の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-4998 2016-07-8 11:56 2016-03-23 Show GitHub Exploit DB Packet Storm
207988 9.8 緊急
Network
Linux - Linux Kernel の drivers/usb/usbip/usbip_common.c の usbip_recv_xbuff 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-3955 2016-07-8 11:56 2016-05-4 Show GitHub Exploit DB Packet Storm
207989 9.8 緊急
Network
The phpMyAdmin Project - phpMyAdmin の libraries/central_columns.lib.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-5703 2016-07-8 11:49 2016-06-23 Show GitHub Exploit DB Packet Storm
207990 9.1 緊急
Network
シマンテック - Symantec Anti-Virus Engine のカーネルコンポーネントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2016-2208 2016-07-8 11:43 2016-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
821 3.3 LOW
Local
- - A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line… New CWE-284
Improper Access Control
CVE-2026-48936 2026-06-27 01:11 2026-06-26 Show GitHub Exploit DB Packet Storm
822 4.3 MEDIUM
Network
- - A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers through the `tracker-campaigns.php` script in … New CWE-284
Improper Access Control
CVE-2026-50739 2026-06-27 01:11 2026-06-26 Show GitHub Exploit DB Packet Storm
823 6.1 MEDIUM
Network
- - A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could exploit the refresh parameter of the iFrame … New CWE-79
Cross-site Scripting
CVE-2026-50740 2026-06-27 01:11 2026-06-26 Show GitHub Exploit DB Packet Storm
824 8.8 HIGH
Network
- - Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin ident… New CWE-94
Code Injection
CVE-2026-50741 2026-06-27 01:11 2026-06-26 Show GitHub Exploit DB Packet Storm
825 4.4 MEDIUM
Network
- - A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without… New CWE-79
Cross-site Scripting
CVE-2026-50742 2026-06-27 01:11 2026-06-26 Show GitHub Exploit DB Packet Storm
826 4.3 MEDIUM
Network
- - A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method … New CWE-284
Improper Access Control
CVE-2026-50744 2026-06-27 01:11 2026-06-26 Show GitHub Exploit DB Packet Storm
827 4.7 MEDIUM
Network
- - A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty cus… New CWE-79
Cross-site Scripting
CVE-2026-50745 2026-06-27 01:11 2026-06-26 Show GitHub Exploit DB Packet Storm
828 - - - FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, w… New CWE-306
Missing Authentication for Critical Function
CVE-2026-43920 2026-06-27 01:10 2026-06-26 Show GitHub Exploit DB Packet Storm
829 6.1 MEDIUM
Network
- - Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a substring check rather than a host check at str_contains($refer… New CWE-601
Open Redirect
CVE-2026-40080 2026-06-27 01:09 2026-06-26 Show GitHub Exploit DB Packet Storm
830 5.4 MEDIUM
Network
- - Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after login, leading to Session Fixation. session_regenerate_id() is… New CWE-384
 Session Fixation
CVE-2026-40082 2026-06-27 01:09 2026-06-26 Show GitHub Exploit DB Packet Storm