Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218251 5 警告 VMware - VMware NSX および vCloud Networking and Security における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2014-3796 2014-09-16 18:50 2014-09-11 Show GitHub Exploit DB Packet Storm
218252 4 警告 Moodle - Moodle の mod/forum/lib.php 内の forum_print_latest_discussions 関数における個々の answer-posting 要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3617 2014-09-16 18:49 2014-09-15 Show GitHub Exploit DB Packet Storm
218253 7.5 危険 エンバカデロ・テクノロジーズ - Embarcadero Delphi と C++Builder の VCL にバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0993 2014-09-16 18:11 2014-09-11 Show GitHub Exploit DB Packet Storm
218254 6.5 警告 Tribulant Software - WordPress 用 Tribulant Slideshow Gallery プラグインにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-5460 2014-09-16 18:05 2014-08-29 Show GitHub Exploit DB Packet Storm
218255 5 警告 IBM - IBM Rational コラボレーティブ・ライフサイクル・マネージメント などの Rational 製品で使用される Jazz Team Server におけるセッション Cookie をキャプチャされる脆弱性 CWE-200
情報漏えい
CVE-2014-3092 2014-09-16 17:55 2014-09-9 Show GitHub Exploit DB Packet Storm
218256 5 警告 MiniUPnP Project
Linux
- MiniUPnP の miniwget.c の getHTTPレスポンス関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-3985 2014-09-16 16:54 2014-04-8 Show GitHub Exploit DB Packet Storm
218257 4.3 警告 fatfreecrm.com - Fat Free CRM の app/views/layouts/application.html.haml におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5441 2014-09-16 16:45 2014-08-26 Show GitHub Exploit DB Packet Storm
218258 2.1 注意 IBM - IBM SONAS および IBM Storwize V7000 Unified における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-3077 2014-09-16 16:34 2014-09-11 Show GitHub Exploit DB Packet Storm
218259 7.5 危険 MPEX Solutions - MPEX Business Solutions MX-SmartTimer の Login.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5440 2014-09-16 16:33 2014-08-29 Show GitHub Exploit DB Packet Storm
218260 3.5 注意 Spiceworks Inc. - SpiceWorks におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3740 2014-09-16 16:31 2014-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
911 - - - The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish r… New CWE-287
Improper Authentication
CVE-2026-49186 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
912 - - - The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse. New CWE-200
Information Exposure
CVE-2026-49187 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
913 - - - The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands. New CWE-489
Exposure of Data Element to Wrong Session 
CVE-2026-49188 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
914 - - - Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations. New CWE-269
 Improper Privilege Management
CVE-2026-49189 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
915 - - - The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions. New CWE-78
OS Command 
CVE-2026-49190 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
916 - - - The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages. New CWE-287
Improper Authentication
CVE-2026-49191 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
917 - - - The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping. New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-49192 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
918 - - - Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet. New CWE-200
Information Exposure
CVE-2026-49193 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
919 - - - The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and directly enter an interactive shell interface. New CWE-287
Improper Authentication
CVE-2026-49194 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
920 - - - Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft. New CWE-287
Improper Authentication
CVE-2026-49202 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm