Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216711 5.4 警告 NQ Mobile - Android 用 NQ Mobile Security & Antivirus アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5672 2014-11-12 10:55 2014-09-3 Show GitHub Exploit DB Packet Storm
216712 5.4 警告 Noodlecake Studios Inc - Android 用 Super Stickman Golf アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5671 2014-11-12 10:52 2014-09-3 Show GitHub Exploit DB Packet Storm
216713 5.4 警告 ninja kiwi - Android 用 SAS: Zombie Assault 3 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5670 2014-11-12 10:50 2014-09-3 Show GitHub Exploit DB Packet Storm
216714 5.4 警告 9GAG - Android 用 9GAG - Funny pics and videos アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5669 2014-11-12 10:43 2014-09-3 Show GitHub Exploit DB Packet Storm
216715 5.4 警告 Camp Mobile - Android 用 BAND -Group sharing & planning アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5668 2014-11-12 10:32 2014-09-3 Show GitHub Exploit DB Packet Storm
216716 5.4 警告 Kiragames Co., Ltd. - Android 用 Unblock Me FREE アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5653 2014-11-12 10:29 2014-09-3 Show GitHub Exploit DB Packet Storm
216717 5.4 警告 Receivd, Inc. - Android 用 Kicksend Photo Prints アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5652 2014-11-12 10:23 2014-09-3 Show GitHub Exploit DB Packet Storm
216718 5.4 警告 Receivd, Inc. - Android 用 Kicksend: ワンタッチで写真共有アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5651 2014-11-12 10:17 2014-09-3 Show GitHub Exploit DB Packet Storm
216719 - - Zopim - ** 削除 ** Android 用 Zopim ライブラリにおけるサーバになりすまされる脆弱性 - CVE-2014-5530 2014-11-11 18:17 2014-09-3 Show GitHub Exploit DB Packet Storm
216720 4.9 警告 Linux - Linux Kernel の fs/dcache.c 内の d_walk 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8559 2014-11-11 18:02 2014-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 9.9 CRITICAL
Network 		- - OneUptime is an open-source monitoring and observability platform. Prior to 10.0.98, OneUptime uses the Node.js' vm module as an isolation primitive. This API was not designed for that and can be esc… Update CWE-693
 Protection Mechanism Failure 		CVE-2026-45102 2026-06-2 03:50 2026-05-28 Show GitHub Exploit DB Packet Storm
22 7.8 HIGH
Local 		- - systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces() when an active Netwo… Update CWE-78
OS Command  		CVE-2026-44724 2026-06-2 03:50 2026-05-28 Show GitHub Exploit DB Packet Storm
23 7.5 HIGH
Network 		- - Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Access Control vulnerability allows an unauthenticated attacker to retrieve the bcr… Update CWE-200
CWE-306
Information Exposure
Missing Authentication for Critical Function 		CVE-2026-45332 2026-06-2 03:50 2026-05-29 Show GitHub Exploit DB Packet Storm
24 - - - Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.102.2, a malicious ZIP archive imported with safe import enabled… Update CWE-22
CWE-79
Path Traversal
Cross-site Scripting 		CVE-2026-45668 2026-06-2 03:50 2026-05-30 Show GitHub Exploit DB Packet Storm
25 - - - UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write operation raises an excepti… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-44660 2026-06-2 03:50 2026-05-28 Show GitHub Exploit DB Packet Storm
26 7.5 HIGH
Network 		google chrome Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Ch… Update CWE-416
 Use After Free 		CVE-2026-9934 2026-06-2 03:49 2026-05-29 Show GitHub Exploit DB Packet Storm
27 8.8 HIGH
Network 		google chrome Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Update CWE-416
 Use After Free 		CVE-2026-9941 2026-06-2 03:49 2026-05-29 Show GitHub Exploit DB Packet Storm
28 8.8 HIGH
Network 		google chrome Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Update CWE-122
Heap-based Buffer Overflow 		CVE-2026-9940 2026-06-2 03:49 2026-05-29 Show GitHub Exploit DB Packet Storm
29 6.5 MEDIUM
Network 		google chrome Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chro… Update CWE-457
 Use of Uninitialized Variable 		CVE-2026-9917 2026-06-2 03:48 2026-05-29 Show GitHub Exploit DB Packet Storm
30 9.6 CRITICAL
Network 		google chrome Inappropriate implementation in Tint in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: H… Update CWE-269
 Improper Privilege Management 		CVE-2026-9918 2026-06-2 03:48 2026-05-29 Show GitHub Exploit DB Packet Storm