Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219301 5 警告 Innovative Interfaces Inc. - Innovative Interfaces Encore Discovery Solution における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5128 2014-09-3 12:03 2014-08-26 Show GitHub Exploit DB Packet Storm
219302 5.8 警告 Innovative Interfaces Inc. - Innovative Interfaces Encore Discovery Solution におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2014-5127 2014-09-3 11:59 2014-08-26 Show GitHub Exploit DB Packet Storm
219303 4.3 警告 Zoho Corporation - ZOHO ManageEngine EventLog Analyzer の event/index2.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4930 2014-09-3 11:52 2014-08-26 Show GitHub Exploit DB Packet Storm
219304 9 危険 アルバネットワークス株式会社 - Aruba Networks ClearPass Policy Manager の管理コンソールにおける任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2593 2014-09-3 11:36 2014-07-25 Show GitHub Exploit DB Packet Storm
219305 4.3 警告 freedesktop.org - Poppler の DCTStream.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-5110 2014-09-3 11:26 2010-04-5 Show GitHub Exploit DB Packet Storm
219306 4.3 警告 シックス・アパート株式会社 - Six Apart Movable Type Pro におけるクロスサイトスクリプティングの脆弱性 CVE-2012-1503
 Movable Type Pro 5.13en
 Stored XSS
 CWE-79
 CAPEC-86
 Full Disclosure
CWE-79
CVE-2012-1503 2014-09-3 11:19 2012-10-17 Show GitHub Exploit DB Packet Storm
219307 5 警告 Wordpress Mobile Pack project - WordPress 用 WordPress Mobile Pack プラグイン における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-5337 2014-09-3 11:16 2014-08-18 Show GitHub Exploit DB Packet Storm
219308 6 警告 Linux - Linux Kernel の fs/namespace.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-5207 2014-09-2 14:59 2014-07-28 Show GitHub Exploit DB Packet Storm
219309 7.5 危険 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3063 2014-09-2 14:57 2014-07-29 Show GitHub Exploit DB Packet Storm
219310 4.9 警告 BlackBerry - BlackBerry Enterprise Server および Enterprise Service における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2014-1469 2014-09-2 14:55 2014-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.5 MEDIUM
Network 		- - Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. New CWE-23
 Relative Path Traversal 		CVE-2026-47287 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
622 6.5 MEDIUM
Network 		- - Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network. New CWE-200
Information Exposure 		CVE-2026-47284 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
623 9.6 CRITICAL
Network 		- - Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. New CWE-306
CWE-798
CWE-862
Missing Authentication for Critical Function
 Use of Hard-coded Credentials
 Missing Authorization 		CVE-2026-47281 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
624 7.2 HIGH
Network 		- - md-fileserver allows for local viewing of markdown files in a browser. Prior to version 1.10.3, a cross-site scripting (XSS) vulnerability exists in the application’s Markdown rendering logic. When u… New CWE-80
CWE-87
Basic XSS
 Improper Neutralization of Alternate XSS Syntax 		CVE-2026-46492 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
625 - - - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when credentials are fetched with a credentialName filter parameter, the encryptedData… New CWE-200
Information Exposure 		CVE-2026-46443 2026-06-10 02:17 2026-06-9 Show GitHub Exploit DB Packet Storm
626 7.8 HIGH
Local 		- - Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. New CWE-284
Improper Access Control 		CVE-2026-45658 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
627 9.8 CRITICAL
Network 		- - Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network. New CWE-122
CWE-416
Heap-based Buffer Overflow
 Use After Free 		CVE-2026-45657 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
628 7.8 HIGH
Local 		- - Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. New CWE-693
 Protection Mechanism Failure 		CVE-2026-45656 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
629 5.3 MEDIUM
Physics 		- - Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. New CWE-693
 Protection Mechanism Failure 		CVE-2026-45655 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
630 7.9 HIGH
Local 		- - Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-284
Improper Access Control 		CVE-2026-45654 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm