Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
11 5.5 警告
Local
- アップルのmacOSにおける保護メカニズムの不具合に関する脆弱性 New CWE-693
保護メカニズムの不具合
CVE-2025-30431 2026-06-15 11:21 2026-06-11 Show GitHub Exploit DB Packet Storm
12 5.5 警告
Local
- アップルのmacOSにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 New CWE-359
認可されていないアクターへの個人情報の漏えい
CVE-2025-30459 2026-06-15 11:21 2026-06-11 Show GitHub Exploit DB Packet Storm
13 7.8 重要
Local
- アップルのmacOSにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理
CVE-2025-31272 2026-06-15 11:21 2026-06-11 Show GitHub Exploit DB Packet Storm
14 5.5 警告
Local
- アップルのmacOSにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御
CVE-2025-43339 2026-06-15 11:21 2026-06-11 Show GitHub Exploit DB Packet Storm
15 5.5 警告
Local
- アップルのmacOSにおけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題
CVE-2025-46293 2026-06-15 11:21 2026-06-11 Show GitHub Exploit DB Packet Storm
16 5.3 警告
Network
アップル iOS
iPadOS
アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御
CVE-2025-46308 2026-06-15 11:21 2026-06-11 Show GitHub Exploit DB Packet Storm
17 7.5 重要
Network
- アップルのmacOSにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御
CVE-2025-46315 2026-06-15 11:21 2026-06-11 Show GitHub Exploit DB Packet Storm
18 7.5 重要
Network
GPAC GPAC GPACにおけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー
CVE-2025-52292 2026-06-15 11:21 2026-06-9 Show GitHub Exploit DB Packet Storm
19 7.5 重要
Network
GPAC GPAC GPACにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2025-52293 2026-06-15 11:21 2026-06-9 Show GitHub Exploit DB Packet Storm
20 5.5 警告
Local
GPAC GPAC GPACにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2025-55651 2026-06-15 11:21 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2581 - - - In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerabili… CWE-95
Eval Injection
CVE-2026-8914 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2582 6.5 MEDIUM
Network
- - Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or directories outside the d… CWE-59
Link Following
CVE-2026-11322 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2583 5.4 MEDIUM
Network
- - In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences. CWE-79
Cross-site Scripting
CVE-2026-50591 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2584 6.4 MEDIUM
Network
- - In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view). CWE-79
Cross-site Scripting
CVE-2026-50592 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2585 3.6 LOW
Local
- - A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the c… CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash
CVE-2026-11330 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2586 6.1 MEDIUM
Network
- - Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code throug… CWE-79
Cross-site Scripting
CVE-2026-50230 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2587 7.2 HIGH
Network
- - Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerability in the log viewer that allows attackers to inject malicious scripts by exploiting unescaped template va… CWE-79
Cross-site Scripting
CVE-2026-50231 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2588 5.3 MEDIUM
Network
- - Lyrion Music Server 9.2.0 contains an arbitrary directory listing vulnerability in its readdirectory query, exposed through both the CLI service (TCP port 9090) and the HTTP JSON-RPC endpoint (/jsonr… CWE-548
 Exposure of Information Through Directory Listing
CVE-2026-50233 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2589 6.1 MEDIUM
Network
- - Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attacke… CWE-79
Cross-site Scripting
CVE-2026-50235 2026-06-5 23:59 2026-06-5 Show GitHub Exploit DB Packet Storm
2590 7.8 HIGH
Local
- - A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument deli… CWE-88
Argument Injection
CVE-2026-11332 2026-06-5 23:56 2026-06-5 Show GitHub Exploit DB Packet Storm