Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3621 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-10928 2026-06-8 12:24 2026-06-4 Show GitHub Exploit DB Packet Storm
3622 9.9 緊急
Network 		ABB T-MAC Plus ABBのT-MAC Plusにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2025-14771 2026-06-8 11:51 2026-06-3 Show GitHub Exploit DB Packet Storm
3623 8.8 重要
Network 		ABB T-MAC Plus ABBのT-MAC Plusにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2025-14772 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3624 5.4 警告
Network 		ABB T-MAC Plus ABBのT-MAC Plusにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-14773 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3625 7.4 重要
Adjacent 		ABB T-MAC Plus ABBのT-MAC Plusにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-14774 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3626 5.4 警告
Network 		Koha Koha Kohaにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-26378 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
3627 7.8 重要
Local 		Canonical Ubuntu CanonicalのUbuntuにおける権限の連鎖に関する脆弱性 CWE-268
権限の連鎖 		CVE-2026-3888 2026-06-8 11:50 2026-03-17 Show GitHub Exploit DB Packet Storm
3628 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-49185 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3629 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49186 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3630 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-49187 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305341 - wireshark wireshark Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 8… CWE-399
 Resource Management Errors 		CVE-2012-2392 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
305342 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to … CWE-79
Cross-site Scripting 		CVE-2012-2698 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
305343 - libguestfs libguestfs virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users… CWE-255
Credentials Management 		CVE-2012-2690 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
305344 - redhat sos The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archiv… CWE-255
Credentials Management 		CVE-2012-2664 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
305345 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack. CWE-255
Credentials Management 		CVE-2012-2743 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
305346 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack… CWE-255
Credentials Management 		CVE-2012-2742 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
305347 - mathew_winstone mobile_tools Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL f… CWE-79
Cross-site Scripting 		CVE-2012-2717 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
305348 - shlomi_fish config-inifiles The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these detai… NVD-CWE-Other
CVE-2012-2451 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
305349 - strongswan strongswan The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability." CWE-287
Improper Authentication 		CVE-2012-2388 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
305350 - google chrome Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format. CWE-189
Numeric Errors 		CVE-2012-2834 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm