Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219271	5	警告	Bundler	-	Bundler における任意の gem をインストールされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-0334	2014-11-4 17:06	2013-08-14	Show	GitHub Exploit DB Packet Storm

219272	3.5	注意	IBM	-	IBM Tivoli Application Dependency Discovery Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-6150	2014-11-4 16:21	2014-10-28	Show	GitHub Exploit DB Packet Storm

219273	3.5	注意	IBM	-	IBM Tivoli Application Dependency Discovery Manager における重要なデータベース情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2014-6148	2014-11-4 16:21	2014-10-29	Show	GitHub Exploit DB Packet Storm

219274	4.3	警告	IBM	-	IBM Business Process Manager の redirect-login 機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-6101	2014-11-4 16:20	2014-10-30	Show	GitHub Exploit DB Packet Storm

219275	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM Service インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3375	2014-11-4 15:30	2014-11-3	Show	GitHub Exploit DB Packet Storm

219276	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM admin インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3374	2014-11-4 15:30	2014-11-3	Show	GitHub Exploit DB Packet Storm

219277	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM Dialed Number Analyzer インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3373	2014-11-4 15:30	2014-11-3	Show	GitHub Exploit DB Packet Storm

219278	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM reports インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3372	2014-11-4 15:29	2014-11-3	Show	GitHub Exploit DB Packet Storm

219279	6.5	警告	シスコシステムズ	-	Cisco Unified Communications Manager の管理 Web インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-3366	2014-11-4 15:29	2014-11-3	Show	GitHub Exploit DB Packet Storm

219280	6.8	警告	Adaptive Computing	-	Terascale Open-Source Resource and Queue Manager の lib/Libifl/tm.c における任意のプロセスを強制終了される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3684	2014-11-4 14:46	2014-10-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1011	8.8	HIGH Network	microsoft	windows_app windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_s…	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.	CWE-122 Heap-based Buffer Overflow	CVE-2026-47289	2026-06-13 02:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

1012	8.8	HIGH Network	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.	CWE-416 CWE-787 Use After Free Out-of-bounds Write	CVE-2026-47653	2026-06-13 02:32	2026-06-10	Show	GitHub Exploit DB Packet Storm

1013	7.5	HIGH Network	microsoft	windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2025	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.	CWE-416 CWE-787 Use After Free Out-of-bounds Write	CVE-2026-47654	2026-06-13 02:27	2026-06-10	Show	GitHub Exploit DB Packet Storm

1014	8.3	HIGH Network	google	chrome	Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted …	CWE-416 Use After Free	CVE-2026-12011	2026-06-13 02:20	2026-06-12	Show	GitHub Exploit DB Packet Storm

1015	7.5	HIGH Network	microsoft	remote_desktop_client windows_app windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows…	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.	CWE-416 CWE-787 Use After Free Out-of-bounds Write	CVE-2026-44801	2026-06-13 02:20	2026-06-10	Show	GitHub Exploit DB Packet Storm

1016	8.3	HIGH Network	google	chrome	Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte…	CWE-122 Heap-based Buffer Overflow	CVE-2026-12010	2026-06-13 02:19	2026-06-12	Show	GitHub Exploit DB Packet Storm

1017	8.3	HIGH Network	google	chrome	Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a…	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-12009	2026-06-13 02:18	2026-06-12	Show	GitHub Exploit DB Packet Storm

1018	9.1	CRITICAL Network	-	-	Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-cod…	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-50091	2026-06-13 02:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

1019	9.3	CRITICAL Network	-	-	The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper…	CWE-1289 Improper Validation of Unsafe Equivalence in Input	CVE-2026-50090	2026-06-13 02:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

1020	6.1	MEDIUM Network	-	-	The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:…	CWE-601 Open Redirect	CVE-2026-50089	2026-06-13 02:16	2026-06-13	Show	GitHub Exploit DB Packet Storm