Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
831 8.8 重要
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-0161 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
832 8.8 重要
Network
Google Android GoogleのAndroidにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え
CVE-2026-0162 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
833 8.8 重要
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-120
CWE-787
CVE-2026-0164 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
834 5.7 警告
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-120
CWE-125
CVE-2026-0165 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
835 6.4 警告
Network
ネットギア RBE371 FIRMWARE
RBE372 FIRMWARE
RBE370 FIRMWARE
RBE374 FIRMWARE
ネットギアのRBE370 FIRMWARE等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-0409 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
836 4.5 警告
Adjacent
ネットギア JR6150 ファームウェア ネットギアのJR6150 ファームウェアにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-0412 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
837 4.5 警告
Adjacent
ネットギア RBRE950 FIRMWARE
RBR750 ファームウェア
RBE770 FIRMWARE
RBS750 ファームウェア
RBS860 FIRMWARE
RBR860 FIRMWARE
RBR840 ファームウェア
RBE370 FIRMWARE
RBRE960&n…
ネットギアのRBE370 FIRMWARE等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-0413 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
838 4.5 警告
Adjacent
ネットギア RBE970 FIRMWARE ネットギアのRBE970 FIRMWAREにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-0414 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
839 4.5 警告
Adjacent
ネットギア RBRE950 FIRMWARE
RBR750 ファームウェア
RBS750 ファームウェア
RBS860 FIRMWARE
RBR860 FIRMWARE
RBE970 FIRMWARE
RBR840 ファームウェア
RBRE960 ファームウェア
RBSE960&n…
ネットギアのRBE970 FIRMWARE等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-0415 2026-06-22 11:45 2026-06-9 Show GitHub Exploit DB Packet Storm
840 4.5 警告
Adjacent
ネットギア RAXE450 Firmware
RAXE500 Firmware
ネットギアのRAXE450 Firmware等の複数製品における入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-0416 2026-06-22 11:44 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254171 7.8 HIGH
Local
convert_forms_project convert_forms The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file. NVD-CWE-noinfo
CVE-2018-10063 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254172 5.5 MEDIUM
Local
linux linux_kernel The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a denial of service (NULL pointer dereference) by triggering … CWE-476
 NULL Pointer Dereference
CVE-2018-10074 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254173 4.8 MEDIUM
Network
joyplus-cms_project joyplus-cms joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter. CWE-79
Cross-site Scripting
CVE-2018-10073 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254174 5.5 MEDIUM
Local
jungo windriver windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953827bf DeviceIoControl call. CWE-20
 Improper Input Validation 
CVE-2018-10072 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254175 5.5 MEDIUM
Local
jungo windriver windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call. CWE-20
 Improper Input Validation 
CVE-2018-10071 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254176 6.1 MEDIUM
Network
jdownloads jdownloads The jDownloads extension before 3.2.59 for Joomla! has XSS. CWE-79
Cross-site Scripting
CVE-2018-10068 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254177 5.4 MEDIUM
Network
cacti
debian
cacti
debian_linux
Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used). CWE-79
Cross-site Scripting
CVE-2018-10061 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254178 5.4 MEDIUM
Network
cacti
debian
cacti
debian_linux
Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php. CWE-79
Cross-site Scripting
CVE-2018-10060 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254179 5.4 MEDIUM
Network
cacti cacti Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to determine a page name. CWE-79
Cross-site Scripting
CVE-2018-10059 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254180 9.8 CRITICAL
Network
ipvanish ipvanish IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The `com.ipvanish.osx.vpnhelper` LaunchDaemon implements an insecure XPC service that could allow an attacker to exec… NVD-CWE-noinfo
CVE-2018-10192 2024-11-21 12:40 2018-04-18 Show GitHub Exploit DB Packet Storm