Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253581	4.3	警告	K7 Computing Antiy Labs FRISK Software International VirusBlokAda クイックヒール・テクノロジーズ・ジャパン株式会社アラジン Authentium Jiangmin	-	複数の製品の Gzip ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1460	2012-03-23 17:36	2012-03-21	Show	GitHub Exploit DB Packet Storm

253582	4.3	警告	マカフィー Doctor Web Beijing Rising International Software フォーティネット Panda Security アラジン	-	複数の製品の ELF パーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1454	2012-03-23 16:24	2012-03-21	Show	GitHub Exploit DB Packet Storm

253583	4.3	警告	トレンドマイクロ Antiy Labs マカフィー Ikarus Doctor Web ソフォス CA Technologies Beijing Rising International Software フォーティネットマイクロソフト Panda Security カスペルスキー Emsisoft	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1453	2012-03-23 16:17	2012-03-21	Show	GitHub Exploit DB Packet Storm

253584	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1436	2012-03-23 14:39	2012-03-21	Show	GitHub Exploit DB Packet Storm

253585	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1435	2012-03-23 14:37	2012-03-21	Show	GitHub Exploit DB Packet Storm

253586	4.3	警告	アンラボ Panda Security Ikarus Emsisoft	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1434	2012-03-23 14:34	2012-03-21	Show	GitHub Exploit DB Packet Storm

253587	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1433	2012-03-23 14:26	2012-03-21	Show	GitHub Exploit DB Packet Storm

253588	4.3	警告	Ikarus Emsisoft クイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1452	2012-03-23 14:14	2012-03-21	Show	GitHub Exploit DB Packet Storm

253589	4.3	警告	Ikarus Emsisoft	-	Emsisoft Anti-Malware および Ikarus Virus Utilities T3 Command Line Scanner の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1451	2012-03-23 14:08	2012-03-21	Show	GitHub Exploit DB Packet Storm

253590	4.3	警告	ソフォス Ikarus Emsisoft	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1450	2012-03-23 14:04	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
71	9.8	CRITICAL Network	apache	cxf	Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) external entity res… New	CWE-611 XXE	CVE-2026-49875	2026-06-16 01:32	2026-06-12	Show	GitHub Exploit DB Packet Storm

72	6.5	MEDIUM Network	google	chrome	Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from pr… New	CWE-125 Out-of-bounds Read	CVE-2026-12026	2026-06-16 01:32	2026-06-12	Show	GitHub Exploit DB Packet Storm

73	8.2	HIGH Network	axios	axios	Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream… Update	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2026-44490	2026-06-16 01:31	2026-06-12	Show	GitHub Exploit DB Packet Storm

74	7.5	HIGH Network	-	-	Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed c… New	CWE-78 OS Command	CVE-2026-9863	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

75	9.8	CRITICAL Network	-	-	Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to c… New	CWE-78 OS Command	CVE-2026-9862	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

76	5.3	MEDIUM Network	-	-	Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and forwards it to the proxy target. This l… New	CWE-346 CWE-441 Origin Validation Error Confused Deputy	CVE-2026-9595	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

77	5.4	MEDIUM Network	-	-	The Form Builder CP WordPress plugin before 1.2.47 does not properly sanitize a form configuration value before storing it and using it as part of a client-side script execution, allowing authenticat… New	-	CVE-2026-9278	2026-06-16 01:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

78	3.4	LOW Network	-	-	The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary `.php` files from… New	CWE-22 Path Traversal	CVE-2026-9062	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

79	3.5	LOW Network	-	-	The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and outputting it on the Store Locator WordPress plugin before 1.6.9 admin page, all… New	CWE-79 Cross-site Scripting	CVE-2026-9061	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

80	6.5	MEDIUM Network	-	-	Mattermost Desktop App versions <=6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to crash the application … New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-8683	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm