Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215601 5 警告 IBM - IBM Security AppScan Standard における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2014-6136 2015-02-12 15:30 2014-09-2 Show GitHub Exploit DB Packet Storm
215602 8.5 危険 IBM - IBM Tivoli Monitoring におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-6141 2015-02-12 15:30 2014-12-12 Show GitHub Exploit DB Packet Storm
215603 5 警告 IBM - IBM WebSphere Message Broker および IBM Integration Bus の HTTPInput ノードにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-6170 2015-02-12 15:30 2014-01-23 Show GitHub Exploit DB Packet Storm
215604 5.8 警告 IBM - IBM Security AppScan Standard におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-8918 2015-02-12 15:30 2014-11-14 Show GitHub Exploit DB Packet Storm
215605 4.3 警告 QPR Software Oyj - QPR Portal の note-creation ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8266 2015-02-12 15:26 2014-10-12 Show GitHub Exploit DB Packet Storm
215606 4.3 警告 QPR Software Oyj - QPR Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8267 2015-02-12 15:26 2014-10-12 Show GitHub Exploit DB Packet Storm
215607 6.4 警告 QPR Software Oyj - QPR Portal におけるノートを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8268 2015-02-12 15:26 2014-10-12 Show GitHub Exploit DB Packet Storm
215608 4.3 警告 JAKWEB - Gecko CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1422 2015-02-12 13:57 2015-01-12 Show GitHub Exploit DB Packet Storm
215609 5 警告 シマンテック - Symantec PGP Universal Server および Encryption Management Server におけるアウトバウンドの電子メールメッセージ内の意図しないコンテンツを誘発される脆弱性 CWE-Other
その他
CVE-2014-7287 2015-02-12 13:57 2014-10-2 Show GitHub Exploit DB Packet Storm
215610 9 危険 シマンテック - Symantec PGP Universal Server および Encryption Management Server における任意のシェルコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-7288 2015-02-12 13:57 2014-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 9.6 CRITICAL
Network
- - The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to any account. This is an instance of "CWE-862: Missing Authorization" with an e… New CWE-862
 Missing Authorization
CVE-2026-50084 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
282 9.1 CRITICAL
Network
- - The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3… New CWE-798
 Use of Hard-coded Credentials
CVE-2026-50083 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
283 6.5 MEDIUM
Network
- - The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. This is an instance of "CWE-306: Missing Authentication for Critical Fun… New CWE-306
Missing Authentication for Critical Function
CVE-2026-50082 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
284 5.3 MEDIUM
Network
- - Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, before reading the first request-line, `HttpObjectDecoder` … New CWE-444
HTTP Request Smuggling
CVE-2026-50020 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
285 4.3 MEDIUM
Network
- - NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metada… New CWE-125
Out-of-bounds Read
CVE-2026-47224 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
286 9.8 CRITICAL
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code execution in the host process when untrusted code is executed with a… New CWE-913
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-47210 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
287 10.0 CRITICAL
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as module, worker_threads, cluster, vm, repl, and inspector. However, the … New CWE-693
 Protection Mechanism Failure
CVE-2026-47140 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
288 8.6 HIGH
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding public network builtins from the wildcard builtin option. With this configuration direct access to htt… New CWE-693
 Protection Mechanism Failure
CVE-2026-47139 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
289 5.8 MEDIUM
Local
- - unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race. At time of p… New CWE-125
CWE-415
CWE-704
CWE-787
Out-of-bounds Read
 Double Free
 Incorrect Type Conversion or Cast
 Out-of-bounds Write
CVE-2026-46690 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm
290 - - - A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository a… New CWE-94
Code Injection
CVE-2026-45833 2026-06-13 02:16 2026-06-13 Show GitHub Exploit DB Packet Storm