Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210861 6.8 警告 マイクロソフト - Microsoft Internet Explorer 8 から 11 のブローカーの EditWith 機能における AppContainer 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-6047 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210862 4.3 警告 マイクロソフト - Microsoft Internet Explorer 9 から 11 におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-6046 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210863 6.8 警告 マイクロソフト - Microsoft Internet Explorer 8 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-6044 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210864 9.3 危険 マイクロソフト - Microsoft Internet Explorer 11 の CWindow オブジェクトの実装における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-6042 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210865 3.5 注意 マイクロソフト - Microsoft SharePoint Server 2013 および SharePoint Foundation 2013 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6039 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210866 3.5 注意 マイクロソフト - 複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6037 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210867 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-2558 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210868 9.3 危険 マイクロソフト - Microsoft Visio 2007 および 2010 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-2557 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210869 4.3 警告 マイクロソフト - Microsoft SharePoint Server 2007 および 2010 の InfoPath Forms Services コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-2556 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
210870 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-2555 2015-10-15 16:02 2015-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3521 7.5 HIGH
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with networ… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46829 2026-06-4 02:41 2026-05-29 Show GitHub Exploit DB Packet Storm
3522 6.5 MEDIUM
Network 		nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to f… CWE-285
Improper Authorization 		CVE-2026-45275 2026-06-4 02:39 2026-06-2 Show GitHub Exploit DB Packet Storm
3523 9.1 CRITICAL
Network 		oracle e-business_suite Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… CWE-284
Improper Access Control 		CVE-2026-46819 2026-06-4 02:37 2026-05-29 Show GitHub Exploit DB Packet Storm
3524 3.3 LOW
Local 		nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can req… CWE-200
NVD-CWE-noinfo
Information Exposure 		CVE-2026-45277 2026-06-4 02:36 2026-06-2 Show GitHub Exploit DB Packet Storm
3525 6.1 MEDIUM
Network 		nextcloud user_oidc Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses … CWE-601
Open Redirect 		CVE-2026-45278 2026-06-4 02:34 2026-06-2 Show GitHub Exploit DB Packet Storm
3526 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in Debug builds (SIGA… CWE-476
 NULL Pointer Dereference 		CVE-2026-37226 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3527 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer and enforces assert(rc < len) on the sctp_recvmsg() re… CWE-617
 Reachable Assertion 		CVE-2026-37228 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3528 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote unauthenticated attacker can send any non-PER byte sequence (e.g., a single 0x00 b… CWE-617
 Reachable Assertion 		CVE-2026-37229 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3529 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup returns NULL, triggering assert() in Debug builds (SIG… CWE-476
 NULL Pointer Dereference 		CVE-2026-37230 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3530 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, the 16-bit counter wraps around and produces duplicate… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-37231 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm