Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241091 5 警告 imlib - imlib の _LoadBMP 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3568 2012-09-25 16:47 2007-07-5 Show GitHub Exploit DB Packet Storm
241092 7.5 危険 MySQLDumper-Team - MySQLDumper における認証要求を回避される脆弱性 - CVE-2007-3567 2012-09-25 16:47 2007-07-5 Show GitHub Exploit DB Packet Storm
241093 7.5 危険 Haxx - libcurl における特定のアクセス制限を回避される脆弱性 - CVE-2007-3564 2012-09-25 16:47 2007-07-10 Show GitHub Exploit DB Packet Storm
241094 7.5 危険 php director - PHP Director の videos.php における SQL インジェクションの脆弱性 - CVE-2007-3562 2012-09-25 16:47 2007-07-4 Show GitHub Exploit DB Packet Storm
241095 4.3 警告 Moodle - Moodle の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3555 2012-09-25 16:47 2007-07-4 Show GitHub Exploit DB Packet Storm
241096 7.6 危険 ヒューレット・パッカード - HP Instant Support - Driver Check におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3554 2012-09-25 16:47 2007-06-13 Show GitHub Exploit DB Packet Storm
241097 4.3 警告 オラクル - Oracle Application Server 11i の Rapid Install Web Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3553 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
241098 4.3 警告 Tenable, Inc. - Nessus Vulnerability Scanner の Windows GUI におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3546 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
241099 7.8 危険 IBM - iSeries マシン上の IBM OS/400 におけるファイアーウォールルールを回避される脆弱性 - CVE-2007-3537 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
241100 7.2 危険 NVIDIA - Gentoo Linux で使用される nvidia-drivers におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3532 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2801 6.1 MEDIUM
Local 		- - Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635. CWE-787
 Out-of-bounds Write 		CVE-2026-8916 2026-06-5 00:27 2026-06-4 Show GitHub Exploit DB Packet Storm
2802 - - - This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker cou… CWE-78
OS Command  		CVE-2026-45431 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2803 - - - This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-45432 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2804 - - - This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the… CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-45433 2026-06-5 00:26 2026-06-4 Show GitHub Exploit DB Packet Storm
2805 9.1 CRITICAL
Network 		- - A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-4035 2026-06-5 00:25 2026-06-3 Show GitHub Exploit DB Packet Storm
2806 6.1 MEDIUM
Network 		- - A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use o… CWE-346
 Origin Validation Error 		CVE-2026-6657 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2807 - - - A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: ver… CWE-250
 Execution with Unnecessary Privileges 		CVE-2025-12694 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2808 8.1 HIGH
Network 		- - HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site v… CWE-1027
CVE-2025-59874 2026-06-5 00:25 2026-06-4 Show GitHub Exploit DB Packet Storm
2809 - - - An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. CWE-79
Cross-site Scripting 		CVE-2026-5385 2026-06-5 00:23 2026-06-3 Show GitHub Exploit DB Packet Storm
2810 - - - An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and trigger unescaped rendering in the … CWE-79
Cross-site Scripting 		CVE-2026-42839 2026-06-5 00:23 2026-06-4 Show GitHub Exploit DB Packet Storm