Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213891 6.8 警告 JasPer Project
IBM
オラクル
- JasPer の jpc_crg_getparms 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4517 2015-05-25 16:52 2011-12-15 Show GitHub Exploit DB Packet Storm
213892 6.8 警告 JasPer Project
IBM
オラクル
- JasPer の jpc_cox_getcompparms 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4516 2015-05-25 16:52 2011-12-15 Show GitHub Exploit DB Packet Storm
213893 10 危険 JasPer Project - JasPer の libjasper/base/jas_stream.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-3522 2015-05-25 16:52 2008-10-2 Show GitHub Exploit DB Packet Storm
213894 9.3 危険 サイバートラスト株式会社
JasPer Project
レッドハット
- JasPer における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-3520 2015-05-25 16:52 2008-10-2 Show GitHub Exploit DB Packet Storm
213895 5 警告 Django Software Foundation
Canonical
- Django の utils.html.strip_tags 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-2316 2015-05-25 16:11 2015-03-18 Show GitHub Exploit DB Packet Storm
213896 4.3 警告 OpenStack - OpenStack keystonemiddleware および python-keystoneclient の s3_token ミドルウェアにおける中間者攻撃を実行される脆弱性 CWE-Other
その他
CVE-2015-1852 2015-05-25 16:11 2015-04-14 Show GitHub Exploit DB Packet Storm
213897 5.5 警告 OpenStack
オラクル
- OpenStack Image Registry and Delivery Service の V2 API における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9493 2015-05-25 16:09 2014-12-10 Show GitHub Exploit DB Packet Storm
213898 7.5 危険 FreeType Project - FreeType の sfnt/ttcmap.c 内の tt_cmap4_validate 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9663 2015-05-25 16:09 2014-11-22 Show GitHub Exploit DB Packet Storm
213899 5.5 警告 OpenStack - OpenStack Object Storage におけるオブジェクトの最新バージョンを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-1856 2015-05-25 16:09 2015-04-15 Show GitHub Exploit DB Packet Storm
213900 6.5 警告 The Cacti Group - Cacti における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-0916 2015-05-25 15:28 2015-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 8.6 HIGH
Local
- - When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arb… New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-12057 2026-06-15 21:16 2026-06-15 Show GitHub Exploit DB Packet Storm
182 7.8 HIGH
Local
- - Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to… New CWE-427
 Uncontrolled Search Path Element
CVE-2026-50100 2026-06-15 19:16 2026-06-15 Show GitHub Exploit DB Packet Storm
183 5.3 MEDIUM
Network
- - A flaw was found in Ansible Lightspeed. This vulnerability, related to insufficient session expiration, allows a remote attacker to maintain persistent access to the Ansible Lightspeed instance. If a… New CWE-613
 Insufficient Session Expiration
CVE-2026-44188 2026-06-15 19:16 2026-06-15 Show GitHub Exploit DB Packet Storm
184 - - - Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. This allows attackers to tamper with serialized payloads in transit and inject mal… New CWE-94
CWE-502
Code Injection
 Deserialization of Untrusted Data
CVE-2026-11860 2026-06-15 19:16 2026-06-15 Show GitHub Exploit DB Packet Storm
185 5.5 MEDIUM
Adjacent
- - A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the file /api/inner/tftpuploadiperf of the component Web Fa… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-12223 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
186 8.0 HIGH
Adjacent
- - A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the function mod_webd.BlueToothTest of the file /api/inner/bttest of the component Web FastCGI Service. Executing a manipu… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-12222 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
187 8.0 HIGH
Adjacent
- - A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk Upload Handler. Performing a manipulatio… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-12221 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
188 8.0 HIGH
Adjacent
- - A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgrade.SparePartsUpload of the file /api/upgrade/accupgradebychunk of the component Firmware Chunk Uplo… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-12220 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
189 6.3 MEDIUM
Network
- - A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagnosis/start of the component Web FastCGI Service. Thi… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-12219 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm
190 8.0 HIGH
Adjacent
- - A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest of the component Web FastCGI Service. T… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-12218 2026-06-15 15:16 2026-06-15 Show GitHub Exploit DB Packet Storm