Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1831 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Sampler アドビのAdobe Substance 3D Samplerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-48306 2026-06-12 14:46 2026-06-9 Show GitHub Exploit DB Packet Storm
1832 5.5 警告
Local 		ImageMagick ImageMagick ImageMagickにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-48724 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1833 4.7 警告
Local 		ImageMagick ImageMagick ImageMagickにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-48733 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1834 5.5 警告
Local 		ImageMagick ImageMagick ImageMagickにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-48734 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1835 5.9 警告
Network 		ImageMagick ImageMagick ImageMagickにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-48994 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1836 7.5 重要
Network 		ImageMagick ImageMagick ImageMagickにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-49218 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1837 5.5 警告
Local 		ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 CWE-200
CWE-22
CWE-78
CWE-863
CVE-2026-49219 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
1838 7.5 重要
Network 		NLnet Labs Routinator NLnet LabsのRoutinatorにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-49233 2026-06-12 14:46 2026-06-8 Show GitHub Exploit DB Packet Storm
1839 7.5 重要
Network 		NLnet Labs Routinator NLnet LabsのRoutinatorにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-49234 2026-06-12 14:46 2026-06-8 Show GitHub Exploit DB Packet Storm
1840 7.5 重要
Network 		NLnet Labs Routinator NLnet LabsのRoutinatorにおける例外的な状態の処理に関する脆弱性 CWE-755
例外的な状態における不適切な処理 		CVE-2026-49235 2026-06-12 14:46 2026-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4371 8.8 HIGH
Network 		- - The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_meta' REST API field and the V200 database migration in versions up to and incl… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-8365 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4372 6.4 MEDIUM
Network 		- - The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Field in all versions … CWE-79
Cross-site Scripting 		CVE-2026-8599 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4373 6.4 MEDIUM
Network 		- - The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Widget HTML Tag Settings in all versions up to, and i… CWE-79
Cross-site Scripting 		CVE-2026-8677 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4374 4.3 MEDIUM
Network 		- - The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi… CWE-862
 Missing Authorization 		CVE-2026-4058 2026-06-9 22:33 2026-06-9 Show GitHub Exploit DB Packet Storm
4375 - - - In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" This reverts commit ea52cb24cd3f ("mm/hugetlbfs: update hugetlbfs to … - CVE-2026-46318 2026-06-9 22:16 2026-06-9 Show GitHub Exploit DB Packet Storm
4376 8.0 HIGH
Network 		- - VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri… CWE-79
Cross-site Scripting 		CVE-2026-41723 2026-06-9 22:16 2026-06-8 Show GitHub Exploit DB Packet Storm
4377 8.0 HIGH
Network 		- - VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri… CWE-79
Cross-site Scripting 		CVE-2026-41722 2026-06-9 22:16 2026-06-8 Show GitHub Exploit DB Packet Storm
4378 6.5 MEDIUM
Network 		google chrome Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via… CWE-284
Improper Access Control 		CVE-2026-11190 2026-06-9 21:51 2026-06-5 Show GitHub Exploit DB Packet Storm
4379 6.5 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restricti… CWE-20
 Improper Input Validation  		CVE-2026-11189 2026-06-9 21:51 2026-06-5 Show GitHub Exploit DB Packet Storm
4380 8.8 HIGH
Network 		google chrome Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security s… CWE-125
Out-of-bounds Read 		CVE-2026-11191 2026-06-9 21:50 2026-06-5 Show GitHub Exploit DB Packet Storm