Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217891 5 警告 Openswan - Openswan におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2037 2014-11-27 15:19 2014-02-21 Show GitHub Exploit DB Packet Storm
217892 5 警告 シーメンス - 複数のシーメンス製品における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-8552 2014-11-27 15:12 2014-11-21 Show GitHub Exploit DB Packet Storm
217893 10 危険 シーメンス - 複数のシーメンス製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-8551 2014-11-27 15:12 2014-11-21 Show GitHub Exploit DB Packet Storm
217894 7.8 危険 Zoho Corporation - ManageEngine OpUtils の ConfigSaveServlet サーブレットにおけるファイルを公開される脆弱性 CWE-200
情報漏えい
CVE-2014-8678 2014-11-27 14:58 2014-11-21 Show GitHub Exploit DB Packet Storm
217895 5 警告 シスコシステムズ - Network Convergence System 6000 デバイス上で稼働する Cisco IOS XR の lighttpd モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2014-8005 2014-11-27 14:53 2014-11-25 Show GitHub Exploit DB Packet Storm
217896 6.5 警告 Jexperts - JExperts Channel Platform におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8558 2014-11-27 14:46 2014-10-27 Show GitHub Exploit DB Packet Storm
217897 4.3 警告 IBM - IBM Web Experience Factory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6196 2014-11-27 14:45 2014-11-12 Show GitHub Exploit DB Packet Storm
217898 3.5 注意 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6093 2014-11-27 14:45 2014-11-21 Show GitHub Exploit DB Packet Storm
217899 9 危険 デル - 複数の Dell SonicWALL 製品の ViewPoint Web アプリケーションにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-8420 2014-11-27 14:37 2014-11-21 Show GitHub Exploit DB Packet Storm
217900 9 危険 アルバネットワークス株式会社 - Aruba Networks AirWave の Web インターフェースにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8368 2014-11-27 14:28 2014-11-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1531 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-After-Free (UAF) and Nul… New - CVE-2026-46275 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
1532 - - - In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending() io_wq_remove_pending() needs to fix up wq->hash_tail[] if t… New - CVE-2026-46274 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
1533 5.4 MEDIUM
Network
- - IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customers that are not assi… Update CWE-863
 Incorrect Authorization
CVE-2026-42547 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1534 4.7 MEDIUM
Network
- - Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redir… Update CWE-602
 Client-Side Enforcement of Server-Side Security
CVE-2026-42329 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1535 8.8 HIGH
Network
- - Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. The provisioning cod… Update CWE-59
Link Following
CVE-2026-41236 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1536 7.3 HIGH
Network
- - A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation… Update CWE-74
CWE-77
Injection
Command Injection
CVE-2026-11450 2026-06-9 01:16 2026-06-7 Show GitHub Exploit DB Packet Storm
1537 4.7 MEDIUM
Network
- - A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument ku… Update CWE-74
CWE-77
Injection
Command Injection
CVE-2026-11448 2026-06-9 01:16 2026-06-7 Show GitHub Exploit DB Packet Storm
1538 9.6 CRITICAL
Network
google chrome Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a … Update CWE-20
 Improper Input Validation 
CVE-2026-11120 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1539 7.2 HIGH
Network
- - A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injection. It is possible to … Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10870 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
1540 - - - In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in conc… New - CVE-2025-71315 2026-06-9 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm