Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232641 10 危険 softwin - BitDefender 製品に同梱された PE ファイルの解析の実装における整数オーバーフローの脆弱性 - CVE-2006-6627 2012-12-20 18:02 2006-12-18 Show GitHub Exploit DB Packet Storm
232642 5 警告 リアルネットワークス - RealNetworks RealPlayer の rpau3260.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6759 2012-12-20 18:02 2005-11-10 Show GitHub Exploit DB Packet Storm
232643 10 危険 supportsoft
シマンテック		 - 複数の Symantec 製品で使用される SupportSoft の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2006-6490 2012-12-20 18:02 2007-02-22 Show GitHub Exploit DB Packet Storm
232644 5 警告 SISCO - SISCO MMS-EASE および ICCP Toolkit で使用されている SISCO OSI スタックにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6489 2012-12-20 18:02 2007-01-17 Show GitHub Exploit DB Packet Storm
232645 4 警告 sambar - Sambar Server の FTP Server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6624 2012-12-20 18:02 2006-12-18 Show GitHub Exploit DB Packet Storm
232646 6 警告 w00t gallery - w00t Gallery の index.php における同一 Web サーバ上の他の環境へのアクセス権を取得される脆弱性 - CVE-2006-6616 2012-12-20 18:02 2006-12-17 Show GitHub Exploit DB Packet Storm
232647 1.9 注意 Debian
thomas lange		 - FAI の save_log_local 関数におけるルートパスワードのハッシュを取得される脆弱性 - CVE-2006-6614 2012-12-20 18:02 2006-12-11 Show GitHub Exploit DB Packet Storm
232648 6.8 警告 phpalbum.net - phpAlbum の language.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6613 2012-12-20 18:02 2006-12-17 Show GitHub Exploit DB Packet Storm
232649 7.5 危険 phpmycms - PhpMyCms の basic.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6612 2012-12-20 18:02 2006-12-17 Show GitHub Exploit DB Packet Storm
232650 6.5 警告 TorrentFlux - TorrentFlux の downloaddetails.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6604 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 7.8 HIGH
Local 		google android In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege w… New CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-0096 2026-06-3 03:05 2026-06-2 Show GitHub Exploit DB Packet Storm
42 8.0 HIGH
Adjacent 		google android In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation of privilege with no… New CWE-693
 Protection Mechanism Failure 		CVE-2026-0097 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
43 7.8 HIGH
Local 		google android In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional ex… New CWE-441
Confused Deputy 		CVE-2026-0098 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
44 7.8 HIGH
Local 		google android In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege wit… New CWE-273
 Improper Check for Dropped Privileges 		CVE-2026-0099 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
45 7.8 HIGH
Local 		google android In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-0100 2026-06-3 03:04 2026-06-2 Show GitHub Exploit DB Packet Storm
46 5.5 MEDIUM
Local 		google android In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service with no additional e… New CWE-20
 Improper Input Validation  		CVE-2026-28578 2026-06-3 03:03 2026-06-2 Show GitHub Exploit DB Packet Storm
47 7.8 HIGH
Local 		google android In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use… New CWE-120
Classic Buffer Overflow 		CVE-2026-28580 2026-06-3 03:03 2026-06-2 Show GitHub Exploit DB Packet Storm
48 4.0 MEDIUM
Local 		google android In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with null execution privileg… New CWE-476
 NULL Pointer Dereference 		CVE-2026-28581 2026-06-3 03:03 2026-06-2 Show GitHub Exploit DB Packet Storm
49 3.3 LOW
Local 		google android In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution pri… New CWE-269
 Improper Privilege Management 		CVE-2026-28586 2026-06-3 03:02 2026-06-2 Show GitHub Exploit DB Packet Storm
50 6.5 MEDIUM
Adjacent 		qualcomm fastconnect_7800_firmware
qca7005_firmware
snapdragon_ar1_gen_1_platform_firmware
wcd9380_firmware
wcd9385_firmware
wsa8830_firmware
wsa8832_firmware
wsa8835_firmware 		Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration. New CWE-1230
 Exposure of Sensitive Information Through Metadata 		CVE-2025-59601 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm