Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1391 4.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-11309 2026-06-9 14:15 2026-06-5 Show GitHub Exploit DB Packet Storm
1392 8.8 重要
Local
レッドハット Red Hat OpenShift Container Platform レッドハットのRed Hat OpenShift Container Platformにおけるシステム構成または設定の外部制御に関する脆弱性 CWE-15
システム構成または設定の外部制御
CVE-2026-1784 2026-06-9 14:15 2026-06-2 Show GitHub Exploit DB Packet Storm
1393 6.1 警告
Network
シスコシステムズ Cisco WebEx Meetings シスコシステムズのCisco WebEx Meetingsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-20233 2026-06-9 14:14 2026-06-3 Show GitHub Exploit DB Packet Storm
1394 6 警告
Network
Arista Networks, Inc. NG Firewall Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-25620 2026-06-9 14:14 2026-06-5 Show GitHub Exploit DB Packet Storm
1395 6 警告
Network
Arista Networks, Inc. NG Firewall Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-25621 2026-06-9 14:14 2026-06-5 Show GitHub Exploit DB Packet Storm
1396 6 警告
Network
Arista Networks, Inc. NG Firewall Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-25622 2026-06-9 14:14 2026-06-5 Show GitHub Exploit DB Packet Storm
1397 6 警告
Network
Arista Networks, Inc. NG Firewall Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-25623 2026-06-9 14:14 2026-06-5 Show GitHub Exploit DB Packet Storm
1398 4.8 警告
Network
Arista Networks, Inc. NG Firewall Arista Networks, Inc.のNG Firewallにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-25624 2026-06-9 14:14 2026-06-5 Show GitHub Exploit DB Packet Storm
1399 6.8 警告
Adjacent
レッドハット
Samba Project
Red Hat OpenShift Container Platform
Samba
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品におけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証
CVE-2026-3012 2026-06-9 14:14 2026-05-27 Show GitHub Exploit DB Packet Storm
1400 2.2
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2026-3109 2026-06-9 14:14 2026-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320171 4.8 MEDIUM
Network
peepso peepso The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.4.5.0 due t… CWE-79
Cross-site Scripting
CVE-2024-7655 2024-09-20 03:20 2024-09-10 Show GitHub Exploit DB Packet Storm
320172 4.8 MEDIUM
Network
peepso peepso The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, … CWE-79
Cross-site Scripting
CVE-2024-7618 2024-09-20 03:20 2024-09-10 Show GitHub Exploit DB Packet Storm
320173 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer … CWE-476
 NULL Pointer Dereference
CVE-2024-46694 2024-09-20 03:16 2024-09-13 Show GitHub Exploit DB Packet Storm
320174 5.4 MEDIUM
Network
microfocus netiq_access_manager Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects NetIQ Access Manager before 5.0.4.1 and 5.1. CWE-79
Cross-site Scripting
CVE-2024-4554 2024-09-20 03:15 2024-08-28 Show GitHub Exploit DB Packet Storm
320175 7.1 HIGH
Local
stripe stripe-cli stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a man… CWE-22
Path Traversal
CVE-2024-45401 2024-09-20 03:12 2024-09-6 Show GitHub Exploit DB Packet Storm
320176 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpus_read_lock() in pg_net_init() I have seen the WARN_ON(smp_processor_id() != cpu) firing in pktgen_thread_worker()… NVD-CWE-noinfo
CVE-2024-46681 2024-09-20 03:10 2024-09-13 Show GitHub Exploit DB Packet Storm
320177 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined create_elf_fdpic_tables() does not correctly account the s… CWE-131
Incorrect Calculation of Buffer Size
CVE-2024-46684 2024-09-20 03:04 2024-09-13 Show GitHub Exploit DB Packet Storm
320178 6.1 MEDIUM
Network
mlewand open_link ckeditor-plugin-openlink is a plugin for the CKEditor JavaScript text editor that extends the context menu with a possibility to open a link in a new tab. A vulnerability in versions of the plugin pr… CWE-79
Cross-site Scripting
CVE-2024-45400 2024-09-20 03:04 2024-09-6 Show GitHub Exploit DB Packet Storm
320179 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails If z_erofs_gbuf_growsize() partially fails on a globa… CWE-787
 Out-of-bounds Write
CVE-2024-46688 2024-09-20 03:01 2024-09-13 Show GitHub Exploit DB Packet Storm
320180 5.3 MEDIUM
Network
apple visionos The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona. NVD-CWE-noinfo
CVE-2024-40865 2024-09-20 02:58 2024-09-6 Show GitHub Exploit DB Packet Storm