NVD Vulnerability Information Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2301 6.5 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restricti… CWE-20
 Improper Input Validation  		CVE-2026-11189 2026-06-9 21:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2302 8.8 HIGH
Network 		google chrome Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security s… CWE-125
Out-of-bounds Read 		CVE-2026-11191 2026-06-9 21:50 2026-06-5 Show GitHub Exploit DB Packet Storm
2303 4.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium securi… CWE-20
 Improper Input Validation  		CVE-2026-11192 2026-06-9 21:49 2026-06-5 Show GitHub Exploit DB Packet Storm
2304 6.5 MEDIUM
Network 		google chrome Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium securit… CWE-284
Improper Access Control 		CVE-2026-11193 2026-06-9 21:49 2026-06-5 Show GitHub Exploit DB Packet Storm
2305 - -
- - In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields in struct io_waitid::… - CVE-2026-46315 2026-06-9 18:16 2026-06-9 Show GitHub Exploit DB Packet Storm
2306 7.1 HIGH
Network 		- - A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-10840 2026-06-9 18:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2307 6.5 MEDIUM
Network 		google chrome Inappropriate implementation in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HT… CWE-20
 Improper Input Validation  		CVE-2026-11023 2026-06-9 12:08 2026-06-5 Show GitHub Exploit DB Packet Storm
2308 8.8 HIGH
Network 		google chrome Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium) CWE-121
Stack-based Buffer Overflow 		CVE-2026-11024 2026-06-9 12:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2309 6.5 MEDIUM
Network 		google chrome Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium securit… CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-11025 2026-06-9 12:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2310 6.5 MEDIUM
Network 		google chrome Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium secur… CWE-125
Out-of-bounds Read 		CVE-2026-11096 2026-06-9 12:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2311 6.5 MEDIUM
Network 		google chrome Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Me… CWE-474
 Use of Function with Inconsistent Implementations 		CVE-2026-11097 2026-06-9 12:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2312 5.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HT… CWE-20
 Improper Input Validation  		CVE-2026-11098 2026-06-9 12:07 2026-06-5 Show GitHub Exploit DB Packet Storm
2313 9.6 CRITICAL
Network 		google chrome Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape vi… CWE-416
 Use After Free 		CVE-2026-11100 2026-06-9 12:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2314 6.5 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted H… CWE-20
 Improper Input Validation  		CVE-2026-11121 2026-06-9 12:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2315 6.1 MEDIUM
Network 		google chrome Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security sever… CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2026-11122 2026-06-9 12:06 2026-06-5 Show GitHub Exploit DB Packet Storm
2316 6.5 MEDIUM
Network 		google chrome Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium securit… CWE-457
 Use of Uninitialized Variable 		CVE-2026-11123 2026-06-9 12:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2317 8.8 HIGH
Network 		google chrome Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) CWE-122
Heap-based Buffer Overflow 		CVE-2026-11124 2026-06-9 12:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2318 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chro… CWE-20
 Improper Input Validation  		CVE-2026-11126 2026-06-9 12:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2319 6.5 MEDIUM
Network 		google chrome Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted WebAPK. (Chromium security severity: Medi… CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2026-11127 2026-06-9 12:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2320 6.5 MEDIUM
Network 		google chrome Inappropriate implementation in Web Share in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a craf… CWE-20
 Improper Input Validation  		CVE-2026-11128 2026-06-9 12:05 2026-06-5 Show GitHub Exploit DB Packet Storm
2321 8.3 HIGH
Network 		- - Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… CWE-416
 Use After Free 		CVE-2026-11647 2026-06-9 11:16 2026-06-9 Show GitHub Exploit DB Packet Storm
2322 9.6 CRITICAL
Network 		- - Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free 		CVE-2026-11638 2026-06-9 11:16 2026-06-9 Show GitHub Exploit DB Packet Storm
2323 - -
- - Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and ca… CWE-617
 Reachable Assertion 		CVE-2026-35058 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2324 - -
- - A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS… CWE-125
CWE-416
Out-of-bounds Read
 Use After Free 		CVE-2026-40215 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2325 4.2 MEDIUM
Network 		- - SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credent… CWE-35
 Path Traversal: '.../...//' 		CVE-2026-24315 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2326 9.8 CRITICAL
Network 		- - Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that explo… CWE-121
Stack-based Buffer Overflow 		CVE-2026-27671 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2327 9.0 CRITICAL
Network 		- - SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal an… CWE-35
 Path Traversal: '.../...//' 		CVE-2026-40128 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2328 3.7 LOW
Network 		- - Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-44743 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2329 6.5 MEDIUM
Network 		- - SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized dat… CWE-89
SQL Injection 		CVE-2026-44744 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2330 6.1 MEDIUM
Network 		- - Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver JAVA (JDBC Test Servlet), an unauthenticated attacker could craft a URL that embeds a malicious script. If a victim clicks… CWE-79
Cross-site Scripting 		CVE-2026-44746 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2331 9.9 CRITICAL
Network 		- - SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-44748 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2332 4.3 MEDIUM
Network 		- - SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. This could allow a low-privileged user to perform actions that would otherwise b… CWE-862
 Missing Authorization 		CVE-2026-44750 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2333 7.1 HIGH
Network 		- - Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belongi… CWE-862
 Missing Authorization 		CVE-2026-44751 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2334 6.6 MEDIUM
Network 		- - The Remote Function Call (RFC) modules of the Operational Data Provisioning Data Replication API (ODP-RFC) are missing caller identification of permitted SAP-internal applications and are being used … CWE-862
 Missing Authorization 		CVE-2026-44754 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2335 4.3 MEDIUM
Network 		- - SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by authenticated users, resulting in an email spoofing vulnerability.This vulnerab… CWE-346
 Origin Validation Error 		CVE-2026-44755 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2336 4.7 MEDIUM
Network 		- - SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in t… CWE-79
Cross-site Scripting 		CVE-2026-44757 2026-06-9 11:08 2026-06-9 Show GitHub Exploit DB Packet Storm
2337 7.5 HIGH
Network 		- - Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free 		CVE-2026-11639 2026-06-9 10:37 2026-06-9 Show GitHub Exploit DB Packet Storm
2338 7.5 HIGH
Network 		- - Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafte… CWE-416
 Use After Free 		CVE-2026-11641 2026-06-9 10:37 2026-06-9 Show GitHub Exploit DB Packet Storm
2339 5.5 MEDIUM
Adjacent 		- - A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBinds results in b… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-11516 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2340 4.3 MEDIUM
Network 		- - A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument f… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-11518 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2341 6.3 MEDIUM
Network 		- - A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /Product_Inventory/api/users_handler.php of the comp… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-11519 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2342 3.5 LOW
Network 		- - A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It i… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-11520 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2343 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/c… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-11521 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2344 8.8 HIGH
Network 		- - A vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the argument portMirror… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-11522 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2345 8.8 HIGH
Network 		- - A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-11523 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2346 8.8 HIGH
Network 		- - A vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Interface. The manipul… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-11524 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2347 8.8 HIGH
Network 		- - A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub_45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of … CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-11528 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2348 6.3 MEDIUM
Network 		- - A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-11529 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2349 7.3 HIGH
Network 		- - A vulnerability was identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. This affects an unknown function of the file /index.ph of the component Login. Suc… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-11530 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2350 6.3 MEDIUM
Network 		- - A weakness has been identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected is an unknown function of the file /add.php of the component Student Reco… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-11532 2026-06-9 10:34 2026-06-9 Show GitHub Exploit DB Packet Storm