Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1071	6.5	警告 Network	Synology Inc.	SSL VPN Client	Synology Inc.のSSL VPN Clientにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2021-47960	2026-06-3 17:04	2026-04-10	Show	GitHub Exploit DB Packet Storm

1072	8.1	重要 Network	Synology Inc.	SSL VPN Client	Synology Inc.のSSL VPN Clientにおける認証情報の平文保存に関する脆弱性	CWE-256 平文でパスワードを保存	CVE-2021-47961	2026-06-3 17:04	2026-04-10	Show	GitHub Exploit DB Packet Storm

1073	7.5	重要 Network	デル	Dell Unisphere for PowerMax Virtual Appliance	デルのDell Unisphere for PowerMax Virtual Applianceにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2022-34363	2026-06-3 17:04	2026-05-22	Show	GitHub Exploit DB Packet Storm

1074	7.8	重要 Local	Synology Inc.	BeeDrive	Synology Inc.のBeeDriveにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2023-52945	2026-06-3 17:04	2026-05-27	Show	GitHub Exploit DB Packet Storm

1075	6.5	警告 Network	Apache Software Foundation	Ignite	Apache Software FoundationのIgniteにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2025-48977	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

1076	9.1	緊急 Network	Palo Alto Networks	PAN-OS Prisma Access	Palo Alto NetworksのPAN-OS等の複数製品における検証および完全性チェックを行っていない Cookie への依存に関する脆弱性	CWE-565 検証および完全性チェックを行っていない Cookie への依存	CVE-2026-0257	2026-06-3 17:04	2026-05-13	Show	GitHub Exploit DB Packet Storm

1077	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10001	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

1078	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10002	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

1079	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 CWE-noinfo	CVE-2026-10004	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

1080	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-10006	2026-06-3 17:03	2026-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3081	7.7	HIGH Network	elastic	kibana	Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server t…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-49093	2026-06-1 23:13	2026-05-29	Show	GitHub Exploit DB Packet Storm

3082	7.8	HIGH Local	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin	CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-49382	2026-06-1 22:59	2026-05-30	Show	GitHub Exploit DB Packet Storm

3083	7.8	HIGH Local	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion	CWE-78 OS Command	CVE-2026-49366	2026-06-1 22:59	2026-05-30	Show	GitHub Exploit DB Packet Storm

3084	3.3	LOW Local	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible	CWE-611 XXE	CVE-2026-49383	2026-06-1 22:58	2026-05-30	Show	GitHub Exploit DB Packet Storm

3085	8.8	HIGH Network	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account	CWE-862 Missing Authorization	CVE-2026-49367	2026-06-1 22:56	2026-05-30	Show	GitHub Exploit DB Packet Storm

3086	6.5	MEDIUM Network	elastic	kibana	Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containin…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-49094	2026-06-1 22:31	2026-05-29	Show	GitHub Exploit DB Packet Storm

3087	6.5	MEDIUM Network	elastic	kibana	Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges can manipulate agent po…	CWE-20 Improper Input Validation	CVE-2026-49095	2026-06-1 22:30	2026-05-29	Show	GitHub Exploit DB Packet Storm

3088	7.8	HIGH Local	canonical	multipass	An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199. While the patch in version 1.16.0 updated the ownership of the multipassd da…	CWE-276 Incorrect Default Permissions	CVE-2026-49237	2026-06-1 22:27	2026-05-28	Show	GitHub Exploit DB Packet Storm

3089	8.4	HIGH Local	canonical	multipass	An issue was discovered in Canonical Multipass before version 1.16.3. The host-side SFTP server component (sshfs_server), which executes with root privileges on the host, contains a path containment …	CWE-22 Path Traversal	CVE-2026-49238	2026-06-1 22:26	2026-05-28	Show	GitHub Exploit DB Packet Storm

3090	3.5	LOW Network	-	-	A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function create_medicine_name of the file /ShowForm/create_medicine_name/…	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-10244	2026-06-1 22:14	2026-06-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed