Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219911 6.8 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC Documentum 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2518 2014-08-22 12:19 2014-08-18 Show GitHub Exploit DB Packet Storm
219912 8.5 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum D2 における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2515 2014-08-22 12:18 2014-08-18 Show GitHub Exploit DB Packet Storm
219913 4.3 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC Documentum 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2511 2014-08-22 12:15 2014-08-18 Show GitHub Exploit DB Packet Storm
219914 3.3 注意 GNU Project - GNU Readline の util.c 内の _rl_tropen 関数 における任意のファイルを作成される脆弱性 CWE-59
リンク解釈の問題
CVE-2014-2524 2014-08-22 11:54 2014-03-31 Show GitHub Exploit DB Packet Storm
219915 6.5 警告 AlienVault - AlienVault OSSIM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5383 2014-08-22 11:37 2014-05-5 Show GitHub Exploit DB Packet Storm
219916 10 危険 AlienVault - AlienVault OSSIM の av-centerd SOAP サービスにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-5210 2014-08-22 11:37 2014-05-5 Show GitHub Exploit DB Packet Storm
219917 7.5 危険 AlienVault - AlienVault OSSIM の ossim-framework サービスにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5159 2014-08-22 11:36 2014-03-31 Show GitHub Exploit DB Packet Storm
219918 10 危険 AlienVault - AlienVault OSSIM の ossim-framework サービスにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-5158 2014-08-22 11:36 2014-03-31 Show GitHub Exploit DB Packet Storm
219919 7.5 危険 Ruby on Rails project - Ruby on Rails の Active Record における強力なパラメータ保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3514 2014-08-22 11:35 2014-08-18 Show GitHub Exploit DB Packet Storm
219920 4 警告 シスコシステムズ - Cisco WebEx MeetMeNow Server の PHP スクリプトにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-3340 2014-08-22 11:35 2014-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3531 5.4 MEDIUM
Network
ibm webmethods_integration_server IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). Th… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2025-14290 2026-06-2 02:33 2026-05-27 Show GitHub Exploit DB Packet Storm
3532 7.6 HIGH
Network
ibm cognos_analytics
cognos_transformer
IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows… CWE-79
Cross-site Scripting
CVE-2025-36126 2026-06-2 02:30 2026-05-27 Show GitHub Exploit DB Packet Storm
3533 7.4 HIGH
Network
miniorange saml_sso_-_service_provider Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0 befor… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-5343 2026-06-2 02:29 2026-05-29 Show GitHub Exploit DB Packet Storm
3534 8.8 HIGH
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without track… CWE-415
CWE-416
 Double Free
 Use After Free
CVE-2026-44422 2026-06-2 02:26 2026-05-30 Show GitHub Exploit DB Packet Storm
3535 5.3 MEDIUM
Network
ibm watsonx.data IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. CWE-923
NVD-CWE-noinfo
 Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-36145 2026-06-2 02:24 2026-05-27 Show GitHub Exploit DB Packet Storm
3536 9.8 CRITICAL
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/pl… CWE-787
 Out-of-bounds Write
CVE-2026-45700 2026-06-2 02:23 2026-05-30 Show GitHub Exploit DB Packet Storm
3537 6.1 MEDIUM
Network
ibm financial_transaction_manager_for_multiplatform IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allo… CWE-79
Cross-site Scripting
CVE-2025-36148 2026-06-2 02:22 2026-05-27 Show GitHub Exploit DB Packet Storm
3538 8.8 HIGH
Network
google chrome Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-10013 2026-06-2 02:22 2026-05-29 Show GitHub Exploit DB Packet Storm
3539 9.6 CRITICAL
Network
google chrome Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2026-9967 2026-06-2 02:22 2026-05-29 Show GitHub Exploit DB Packet Storm
3540 8.3 HIGH
Network
google chrome Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-9975 2026-06-2 02:21 2026-05-29 Show GitHub Exploit DB Packet Storm