Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216191 4.3 警告 マイクロソフト - Microsoft Internet Explorer 8 から 11 およびその他の製品で使用される VBScript および JScript エンジンにおける ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2015-1686 2015-05-15 10:56 2015-05-12 Show GitHub Exploit DB Packet Storm
216192 4.3 警告 マイクロソフト - Microsoft Internet Explorer 8 から 11 およびその他の製品で使用される VBScript エンジンの VBScript.dll における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2015-1684 2015-05-15 10:55 2015-05-12 Show GitHub Exploit DB Packet Storm
216193 4.3 警告 マイクロソフト - Microsoft .NET Framework で使用される Windows DirectWrite ライブラリにおけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-1670 2015-05-15 10:31 2015-05-12 Show GitHub Exploit DB Packet Storm
216194 6 警告 マイクロソフト - Microsoft SharePoint Foundation および SharePoint Server における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2015-1700 2015-05-15 10:20 2015-05-12 Show GitHub Exploit DB Packet Storm
216195 10 危険 Novell
Erik de Castro Lopo
オラクル
- libsndfile の sd2.c の sd2_parse_rsrc_fork 関数における脆弱性 CWE-119
バッファエラー
CVE-2014-9496 2015-05-14 17:57 2014-12-23 Show GitHub Exploit DB Packet Storm
216196 7.5 危険 GNU Project
Canonical
- GNU coreutils の parse_datetime 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-9471 2015-05-14 17:56 2014-02-25 Show GitHub Exploit DB Packet Storm
216197 6.4 警告 elfutils Project - elfutils の libelf/elf_begin.c の read_long_names 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-9447 2015-05-14 17:55 2014-12-28 Show GitHub Exploit DB Packet Storm
216198 4 警告 ZNC - ZNC の modules/webadmin.cpp の CWebAdminMod::ChanPage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-9403 2015-05-14 17:55 2014-05-8 Show GitHub Exploit DB Packet Storm
216199 5 警告 Digium - Asterisk Open Source および Certified Asterisk の WebSocket Server におけるメモリ二重解放の脆弱性 CWE-Other
その他
CVE-2014-9374 2015-05-14 17:54 2014-12-10 Show GitHub Exploit DB Packet Storm
216200 6 警告 OTRS プロジェクト - OTRS Help Desk の GenericInterface における任意のチケットにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9324 2015-05-14 17:53 2014-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1051 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths bpf_selem_unlink_nofail() sets SDATA(selem)->smap to NUL… - CVE-2026-52938 2026-06-27 20:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1052 6.1 MEDIUM
Local
- - A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted … CWE-416
 Use After Free
CVE-2025-60465 2026-06-27 15:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1053 7.8 HIGH
Local
freebsd freebsd The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. This assumption does not hold for data placed on a socket by se… CWE-123
 Write-what-where Condition
CVE-2026-45257 2026-06-27 14:16 2026-06-27 Show GitHub Exploit DB Packet Storm
1054 7.5 HIGH
Network
google chrome Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted… CWE-416
 Use After Free
CVE-2026-13283 2026-06-27 14:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1055 8.3 HIGH
Network
google chrome Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chr… CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-13281 2026-06-27 14:16 2026-06-26 Show GitHub Exploit DB Packet Storm
1056 9.6 CRITICAL
Network
- - A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker mess… CWE-862
 Missing Authorization
CVE-2026-11807 2026-06-27 14:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1057 7.5 HIGH
Network
- - Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that v… CWE-200
CWE-668
Information Exposure
 Exposure of Resource to Wrong Sphere
CVE-2026-57231 2026-06-27 13:17 2026-06-27 Show GitHub Exploit DB Packet Storm
1058 7.1 HIGH
Local
rtklib rtklib RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted… CWE-125
Out-of-bounds Read
CVE-2026-56788 2026-06-27 13:17 2026-06-26 Show GitHub Exploit DB Packet Storm
1059 8.8 HIGH
Network
- - Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and mod… CWE-862
 Missing Authorization
CVE-2026-56773 2026-06-27 13:17 2026-06-27 Show GitHub Exploit DB Packet Storm
1060 4.3 MEDIUM
Network
- - RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.7 and earlier, the real-time metrics endpoint at /rustfs/admin/v3/metrics is accessible to any valid IAM user regardless of … CWE-862
 Missing Authorization
CVE-2026-55838 2026-06-27 13:17 2026-06-27 Show GitHub Exploit DB Packet Storm