Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
212861 4.3 警告 Google - Google Chrome の net/http/transport_security_state.cc の DecodeHSTSPreloadRaw 関数におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-1269 2015-06-29 14:04 2015-06-22 Show GitHub Exploit DB Packet Storm
212862 5 警告 Google - Google Chrome で使用される Blink の bindings/scripts/v8_types.py における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2015-1268 2015-06-29 14:04 2015-06-22 Show GitHub Exploit DB Packet Storm
212863 5 警告 Google - Google Chrome で使用される Blink における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2015-1267 2015-06-29 14:04 2015-06-22 Show GitHub Exploit DB Packet Storm
212864 5 警告 Google - Google Chrome の content/browser/webui/content_web_ui_controller_factory.cc におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-1266 2015-06-29 14:04 2015-06-22 Show GitHub Exploit DB Packet Storm
212865 6.8 警告 OpenStack - OpenStack Cinder における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-1851 2015-06-29 12:15 2015-06-23 Show GitHub Exploit DB Packet Storm
212866 7.5 危険 FreeType Project - FreeType におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-9664 2015-06-26 16:29 2014-11-21 Show GitHub Exploit DB Packet Storm
212867 5 警告 FreeType Project - FreeType の pcf/pcfread.c 内の pcf_get_properties 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-9671 2015-06-26 16:27 2014-11-6 Show GitHub Exploit DB Packet Storm
212868 10 危険 DirectFB - DirectFB の proxy/dispatcher/idirectfbsurface_dispatcher.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-2978 2015-06-26 16:23 2014-03-27 Show GitHub Exploit DB Packet Storm
212869 10 危険 DirectFB - DirectFB の proxy/dispatcher/idirectfbsurface_dispatcher.c における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2014-2977 2015-06-26 16:23 2014-03-27 Show GitHub Exploit DB Packet Storm
212870 7.2 危険 GTK+
Canonical
Linux Mint		 - cinnamon-screensaver などのアプリケーションで使用される GTK+ におけるロック画面を回避される脆弱性 CWE-Other
その他 		CVE-2014-1949 2015-06-26 16:23 2014-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2801 6.1 MEDIUM
Local 		- - Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635. CWE-787
 Out-of-bounds Write 		CVE-2026-8916 2026-06-5 00:27 2026-06-4 Show GitHub Exploit DB Packet Storm
2802 - - - This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker cou… CWE-78
OS Command  		CVE-2026-45431 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2803 - - - This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-45432 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2804 - - - This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the… CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-45433 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2805 9.1 CRITICAL
Network 		- - A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-4035 2026-06-5 00:25 2026-06-3 Show GitHub Exploit DB Packet Storm
2806 6.1 MEDIUM
Network 		- - A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use o… CWE-346
 Origin Validation Error 		CVE-2026-6657 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2807 - - - A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: ver… CWE-250
 Execution with Unnecessary Privileges 		CVE-2025-12694 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2808 8.1 HIGH
Network 		- - HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site v… CWE-1027
CVE-2025-59874 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2809 - - - An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. CWE-79
Cross-site Scripting 		CVE-2026-5385 2026-06-5 00:23 2026-06-3 Show GitHub Exploit DB Packet Storm
2810 - - - An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and trigger unescaped rendering in the … CWE-79
Cross-site Scripting 		CVE-2026-42839 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm