Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
91 5.5 警告
Local 		Google Android GoogleのAndroidにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-28578 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
92 7.8 重要
Local 		Google Android GoogleのAndroidにおける古典的バッファオーバーフローの脆弱性 New CWE-120
古典的バッファオーバーフロー 		CVE-2026-28580 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
93 4 警告
Local 		Google Android GoogleのAndroidにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-28581 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
94 3.3 低
Local 		Google Android GoogleのAndroidにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-28586 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
95 7.3 重要
Network 		VIVOTEK Inc. Network Camera FD8136 ファームウェア VIVOTEK Inc.のNetwork Camera FD8136 ファームウェアにおけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-30649 2026-06-5 10:47 2026-06-2 Show GitHub Exploit DB Packet Storm
96 8.8 重要
Network 		VIVOTEK Inc. Network Camera FD8136 ファームウェア VIVOTEK Inc.のNetwork Camera FD8136 ファームウェアにおける古典的バッファオーバーフローの脆弱性 New CWE-120
古典的バッファオーバーフロー 		CVE-2026-30650 2026-06-5 10:47 2026-06-2 Show GitHub Exploit DB Packet Storm
97 8.8 重要
Network 		VIVOTEK Inc. Network Camera FD8136 ファームウェア VIVOTEK Inc.のNetwork Camera FD8136 ファームウェアにおける古典的バッファオーバーフローの脆弱性 New CWE-120
CWE-120
CVE-2026-30652 2026-06-5 10:47 2026-06-2 Show GitHub Exploit DB Packet Storm
98 2.7 低
Network 		projectcapsule capsule Project CapsuleのCapsuleにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-30963 2026-06-5 10:47 2026-06-1 Show GitHub Exploit DB Packet Storm
99 6.5 警告
Network 		lfprojects mlflow lfprojectsのmlflowにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-3198 2026-06-5 10:47 2026-06-2 Show GitHub Exploit DB Packet Storm
100 5.4 警告
Network 		Shopify React Router ShopifyのReact Routerにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-33244 2026-06-5 10:47 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310771 5.5 MEDIUM
Local 		alsa-project alsa alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts. CWE-59
Link Following 		CVE-2009-0035 2024-11-21 09:58 2019-11-9 Show GitHub Exploit DB Packet Storm
310772 9.8 CRITICAL
Network 		gri_project
debian 		gri
debian_linux 		gri before 2.12.18 generates temporary files in an insecure way. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2008-7291 2024-11-21 09:58 2019-11-8 Show GitHub Exploit DB Packet Storm
310773 7.5 HIGH
Network 		getfiregpg firegpg FireGPG before 0.6 handle user’s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure commun… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2008-7272 2024-11-21 09:58 2019-11-8 Show GitHub Exploit DB Packet Storm
310774 6.1 MEDIUM
Network 		tubepress tubepress The tubepress plugin before 1.6.5 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2008-7321 2024-11-21 09:58 2019-08-22 Show GitHub Exploit DB Packet Storm
310775 6.8 MEDIUM
Physics 		gnome seahorse GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is di… CWE-255
Credentials Management 		CVE-2008-7320 2024-11-21 09:58 2018-11-19 Show GitHub Exploit DB Packet Storm
310776 9.8 CRITICAL
Network 		net-ping-external_project net-ping-external The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing… CWE-77
Command Injection 		CVE-2008-7319 2024-11-21 09:58 2017-11-8 Show GitHub Exploit DB Packet Storm
310777 9.8 CRITICAL
Network 		cpan ui\ UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands. CWE-77
Command Injection 		CVE-2008-7315 2024-11-21 09:58 2017-10-11 Show GitHub Exploit DB Packet Storm
310778 9.8 CRITICAL
Network 		snoopy
redhat
nagios 		snoopy
openstack
nagios 		The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796. CWE-77
Command Injection 		CVE-2008-7313 2024-11-21 09:58 2017-04-1 Show GitHub Exploit DB Packet Storm
310779 5.5 MEDIUM
Local 		linux linux_kernel mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault… CWE-20
 Improper Input Validation  		CVE-2008-7316 2024-11-21 09:58 2016-05-2 Show GitHub Exploit DB Packet Storm
310780 - websense enterprise The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP req… CWE-20
 Improper Input Validation  		CVE-2008-7312 2024-11-21 09:58 2012-08-23 Show GitHub Exploit DB Packet Storm