Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251271 5.8 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足
CVE-2012-0528 2012-05-9 14:11 2012-04-17 Show GitHub Exploit DB Packet Storm
251272 6.4 警告 オラクル - Oracle Database Server の OCI における脆弱性 CWE-noinfo
情報不足
CVE-2012-0511 2012-05-9 13:56 2012-04-17 Show GitHub Exploit DB Packet Storm
251273 6.4 警告 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足
CVE-2012-0510 2012-05-9 13:56 2012-04-17 Show GitHub Exploit DB Packet Storm
251274 7.1 危険 オラクル - Windows 上で稼働する Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足
CVE-2012-0519 2012-05-9 13:55 2012-04-17 Show GitHub Exploit DB Packet Storm
251275 4 警告 オラクル - Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1690 2012-05-9 11:46 2012-04-17 Show GitHub Exploit DB Packet Storm
251276 4 警告 オラクル - Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1696 2012-05-9 11:45 2012-04-17 Show GitHub Exploit DB Packet Storm
251277 4 警告 オラクル - Oracle MySQL の MySQL Server におけるパーティションの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1697 2012-05-9 11:42 2012-04-17 Show GitHub Exploit DB Packet Storm
251278 4 警告 オラクル - Oracle MySQL の MySQL Server における MyISAM の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0583 2012-05-9 11:37 2012-04-17 Show GitHub Exploit DB Packet Storm
251279 4.3 警告 アップル - Apple iOS の Safari におけるロケーションバーの URL を偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2012-0674 2012-05-9 11:16 2012-05-8 Show GitHub Exploit DB Packet Storm
251280 9 危険 VMware - 複数の VMware 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2012-2450 2012-05-8 16:40 2012-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.7 MEDIUM
Local
- - A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges … CWE-122
Heap-based Buffer Overflow
CVE-2026-48914 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
622 - - - A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remedia… CWE-325
 Missing Required Cryptographic Step
CVE-2026-9266 2026-06-13 01:06 2026-06-12 Show GitHub Exploit DB Packet Storm
623 8.7 HIGH
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combined with the bridge's… CWE-693
 Protection Mechanism Failure
CVE-2026-47135 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
624 10.0 CRITICAL
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: t… CWE-913
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-47137 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
625 8.6 HIGH
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target o… CWE-693
 Protection Mechanism Failure
CVE-2026-47209 2026-06-13 01:03 2026-06-13 Show GitHub Exploit DB Packet Storm
626 8.0 HIGH
Network
microsoft sharepoint_server Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-285
Improper Authorization
CVE-2026-47298 2026-06-13 01:00 2026-06-10 Show GitHub Exploit DB Packet Storm
627 8.8 HIGH
Network
- - The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operat… CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-12059 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
628 6.5 MEDIUM
Network
- - Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim … CWE-749
 Exposed Dangerous Method or Function
CVE-2026-12060 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
629 4.9 MEDIUM
Network
- - The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended director… CWE-22
Path Traversal
CVE-2026-11844 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm
630 7.2 HIGH
Network
- - The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute … CWE-78
OS Command 
CVE-2026-11845 2026-06-13 01:00 2026-06-12 Show GitHub Exploit DB Packet Storm