Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223841 4 警告 オラクル - Oracle Siebel CRM における Security の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0365 2013-11-8 10:48 2013-01-15 Show GitHub Exploit DB Packet Storm
223842 7.8 危険 オラクル - Oracle Database Mobile Server および Oracle Database Lite における脆弱性 CWE-noinfo
情報不足 		CVE-2013-0362 2013-11-8 10:44 2013-01-15 Show GitHub Exploit DB Packet Storm
223843 5 警告 オラクル - Oracle Enterprise Manager Grid Control の APM における Business Transaction Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0360 2013-11-8 10:43 2013-01-15 Show GitHub Exploit DB Packet Storm
223844 7.5 危険 オラクル - Oracle Enterprise Manager Grid Control の APM における Business Transaction Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0359 2013-11-8 10:42 2013-01-15 Show GitHub Exploit DB Packet Storm
223845 4.3 警告 オラクル - 複数の Oracle Enterprise Manager 製品における Resource Manager の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0358 2013-11-8 10:41 2013-01-15 Show GitHub Exploit DB Packet Storm
223846 4.3 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft PeopleTools における PIA Core Technology の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0357 2013-11-8 10:40 2013-01-15 Show GitHub Exploit DB Packet Storm
223847 4.3 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft PeopleTools における PIA Core Technology の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0356 2013-11-8 10:39 2013-01-15 Show GitHub Exploit DB Packet Storm
223848 4.3 警告 オラクル - 複数の Oracle Enterprise Manager 製品における Distributed/Cross DB Features の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0355 2013-11-8 10:38 2013-01-15 Show GitHub Exploit DB Packet Storm
223849 4.3 警告 オラクル - 複数の Oracle Enterprise Manager 製品における Enterprise Configuration Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0353 2013-11-8 10:36 2013-01-15 Show GitHub Exploit DB Packet Storm
223850 7.1 危険 アップル - Apple iOS のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2013-5141 2013-11-8 10:23 2013-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
631 6.5 MEDIUM
Network 		- - An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to… New CWE-400
CWE-791
 Uncontrolled Resource Consumption
 Incomplete Filtering of Special Elements 		CVE-2026-48208 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
632 7.1 HIGH
Network 		- - An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting (XSS) attacks via … New CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output 		CVE-2026-48209 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
633 7.8 HIGH
Local 		- - A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatte… New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-10118 2026-06-2 03:12 2026-06-2 Show GitHub Exploit DB Packet Storm
634 8.0 HIGH
Adjacent 		mediatek mt6890_firmware
mt7615_firmware
mt7915_firmware
mt7916_firmware
mt7981_firmware
mt7986_firmware
mt7990_firmware
mt7992_firmware
mt7993_firmware 		In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User intera… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-20452 2026-06-2 03:12 2026-06-1 Show GitHub Exploit DB Packet Storm
635 6.7 MEDIUM
Local 		mediatek mt6739_firmware
mt6761_firmware
mt6765_firmware
mt6768_firmware
mt6781_firmware
mt6789_firmware
mt6835_firmware
mt6853_firmware
mt6855_firmware
mt6877_firmware
mt6878_fi… 		In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U… New CWE-787
 Out-of-bounds Write 		CVE-2026-20453 2026-06-2 03:11 2026-06-1 Show GitHub Exploit DB Packet Storm
636 - - - A critical Remote Code Execution (RCE) vulnerability exists in Disig Web Signer versions 2.0.3 through 2.5.3. New CWE-94
Code Injection 		CVE-2026-8931 2026-06-2 03:09 2026-06-2 Show GitHub Exploit DB Packet Storm
637 6.4 MEDIUM
Local 		mediatek mt6739_firmware
mt6761_firmware
mt6765_firmware
mt6768_firmware
mt6781_firmware
mt6789_firmware
mt6835_firmware
mt6853_firmware
mt6855_firmware
mt6877_firmware
mt6878_fi… 		In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User in… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-20454 2026-06-2 03:09 2026-06-1 Show GitHub Exploit DB Packet Storm
638 7.3 HIGH
Network 		- - picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go). The guardCommand() function attempts to restrict shell command execution using a d… Update CWE-78
OS Command  		CVE-2026-36045 2026-06-2 03:09 2026-05-27 Show GitHub Exploit DB Packet Storm
639 4.3 MEDIUM
Network 		- - A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile strings). gf_media… Update CWE-476
 NULL Pointer Dereference 		CVE-2025-70116 2026-06-2 03:09 2026-05-28 Show GitHub Exploit DB Packet Storm
640 5.3 MEDIUM
Network 		- - Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass. Update CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2025-67903 2026-06-2 03:09 2026-05-28 Show GitHub Exploit DB Packet Storm