Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216071 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の User Profile Service における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0004 2015-01-15 16:03 2015-01-13 Show GitHub Exploit DB Packet Storm
216072 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の Application Compatibility コンポーネントにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0002 2015-01-15 16:02 2015-01-13 Show GitHub Exploit DB Packet Storm
216073 1.9 注意 マイクロソフト - 複数の Microsoft Windows 製品の Windows Error Reporting コンポーネントにおける Protected Process Light 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0001 2015-01-15 16:02 2015-01-13 Show GitHub Exploit DB Packet Storm
216074 7.5 危険 Yourmembers - WordPress 用 Code Futures YourMembers プラグインの includes/ym-download_functions.include.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-100003 2015-01-15 15:58 2014-10-14 Show GitHub Exploit DB Packet Storm
216075 6.8 警告 MKT Lines - WordPress 用 SEO Plugin LiveOptim プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-100001 2015-01-15 15:57 2014-04-15 Show GitHub Exploit DB Packet Storm
216076 7.5 危険 Dev4Press - WordPress 用 GD Star Rating プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2839 2015-01-15 15:57 2014-03-28 Show GitHub Exploit DB Packet Storm
216077 6.8 警告 Dev4Press - WordPress 用 GD Star Rating プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2838 2015-01-15 15:57 2014-03-28 Show GitHub Exploit DB Packet Storm
216078 7.1 危険 Mozilla Foundation - Windows 上で稼動する Mozilla Firefox における Gecko Media Plugin サンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8643 2015-01-15 14:14 2014-11-6 Show GitHub Exploit DB Packet Storm
216079 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2014-8642 2015-01-15 14:14 2014-11-6 Show GitHub Exploit DB Packet Storm
216080 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の Web Audio API の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2014-8640 2015-01-15 14:14 2014-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2271 - - - An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAccess function incorre… CWE-287
Improper Authentication
CVE-2026-11345 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2272 - - - A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific proces… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-11346 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2273 - - - The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by th… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-11369 2026-06-6 01:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2274 - - - An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write. When CONFIG_BT_MESH_OD_PRIV_PROXY_SRV is… CWE-787
 Out-of-bounds Write
CVE-2026-5589 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2275 6.3 MEDIUM
Network
- - A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c). When the TLS session cache is enabled, tls_session_… CWE-787
 Out-of-bounds Write
CVE-2026-5066 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2276 4.5 MEDIUM
Local
- - In Mimecast Incydr before 2.6.0, arbitrary file access can occur. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-50590 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2277 7.3 HIGH
Local
- - Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range. CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-50593 2026-06-6 01:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2278 6.3 MEDIUM
Local
- - NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can e… CWE-798
 Use of Hard-coded Credentials
CVE-2026-21404 2026-06-6 01:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2279 - - - A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution. CWE-284
Improper Access Control
CVE-2026-48907 2026-06-6 01:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2280 6.3 MEDIUM
Network
- - Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating… CWE-79
Cross-site Scripting
CVE-2025-65640 2026-06-6 01:04 2026-06-5 Show GitHub Exploit DB Packet Storm