Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220601 4.3 警告 アップル - Apple iOS および Apple Safari などで使用される WebKit におけるアドレスバーを偽装される脆弱性 CWE-Other
その他
CVE-2014-1345 2014-07-9 15:59 2014-06-30 Show GitHub Exploit DB Packet Storm
220602 2.1 注意 アップル - Apple OS X の iBooks Commerce における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-1317 2014-07-9 15:56 2014-06-30 Show GitHub Exploit DB Packet Storm
220603 5 警告 アップル - Apple Safari などで使用される WebKit における postMessage の origin を偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2014-1346 2014-07-9 15:55 2014-05-21 Show GitHub Exploit DB Packet Storm
220604 10 危険 AVG Technologies - AVG Safeguard および AVG Secure Search の ActiveX コントロールに任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2956 2014-07-9 15:26 2014-07-7 Show GitHub Exploit DB Packet Storm
220605 5 警告 Caldera - Caldera の dirmng/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-2933 2014-07-9 15:01 2014-05-7 Show GitHub Exploit DB Packet Storm
220606 4.3 警告 OCS Inventory Team - OCS Inventory NG の OCS Reports Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4722 2014-07-9 14:53 2014-07-1 Show GitHub Exploit DB Packet Storm
220607 6.8 警告 Foxit Software Inc - Foxit PDF SDK DLL の FPDFBookmark_GetTitle メソッドにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-4646 2014-07-9 14:42 2014-05-9 Show GitHub Exploit DB Packet Storm
220608 8.2 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザ権限で RPC コマンドを保存実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2514 2014-07-9 14:08 2014-07-7 Show GitHub Exploit DB Packet Storm
220609 8.2 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザ権限で任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2513 2014-07-9 14:07 2014-07-7 Show GitHub Exploit DB Packet Storm
220610 6.8 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC 製品で使用される EMC Documentum Foundation Services の JAXB XML パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-2510 2014-07-9 14:07 2014-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3681 7.6 HIGH
Network
ibm cognos_analytics
cognos_transformer
IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows… CWE-79
Cross-site Scripting
CVE-2025-36126 2026-06-2 02:30 2026-05-27 Show GitHub Exploit DB Packet Storm
3682 7.4 HIGH
Network
miniorange saml_sso_-_service_provider Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0 befor… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-5343 2026-06-2 02:29 2026-05-29 Show GitHub Exploit DB Packet Storm
3683 8.8 HIGH
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without track… CWE-415
CWE-416
 Double Free
 Use After Free
CVE-2026-44422 2026-06-2 02:26 2026-05-30 Show GitHub Exploit DB Packet Storm
3684 5.3 MEDIUM
Network
ibm watsonx.data IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. CWE-923
NVD-CWE-noinfo
 Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-36145 2026-06-2 02:24 2026-05-27 Show GitHub Exploit DB Packet Storm
3685 9.8 CRITICAL
Network
freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/pl… CWE-787
 Out-of-bounds Write
CVE-2026-45700 2026-06-2 02:23 2026-05-30 Show GitHub Exploit DB Packet Storm
3686 6.1 MEDIUM
Network
ibm financial_transaction_manager_for_multiplatform IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allo… CWE-79
Cross-site Scripting
CVE-2025-36148 2026-06-2 02:22 2026-05-27 Show GitHub Exploit DB Packet Storm
3687 8.8 HIGH
Network
google chrome Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-10013 2026-06-2 02:22 2026-05-29 Show GitHub Exploit DB Packet Storm
3688 9.6 CRITICAL
Network
google chrome Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2026-9967 2026-06-2 02:22 2026-05-29 Show GitHub Exploit DB Packet Storm
3689 8.3 HIGH
Network
google chrome Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-9975 2026-06-2 02:21 2026-05-29 Show GitHub Exploit DB Packet Storm
3690 5.0 MEDIUM
Network
google chrome Insufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted … CWE-20
 Improper Input Validation 
CVE-2026-9979 2026-06-2 02:21 2026-05-29 Show GitHub Exploit DB Packet Storm