Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2361 9.6 緊急
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-11009 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2362 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-11010 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2363 8.1 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるサーバ側のセキュリティのクライアント側での実施に関する脆弱性 CWE-602
サーバ側のセキュリティのクライアント側での実施 		CVE-2026-11011 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2364 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-11012 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2365 6.5 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-11013 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2366 6.5 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるサーバ側のセキュリティのクライアント側での実施に関する脆弱性 CWE-602
サーバ側のセキュリティのクライアント側での実施 		CVE-2026-11014 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2367 8.1 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-11015 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2368 6.5 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-11016 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2369 6.5 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-11017 2026-06-9 14:22 2026-06-4 Show GitHub Exploit DB Packet Storm
2370 6.5 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるサーバ側のセキュリティのクライアント側での実施に関する脆弱性 CWE-602
サーバ側のセキュリティのクライアント側での実施 		CVE-2026-11018 2026-06-9 14:21 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 - - - In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() Local sashiko review pointed it out that group->domain co… New - CVE-2026-53280 2026-06-27 05:17 2026-06-27 Show GitHub Exploit DB Packet Storm
462 - - - In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries t… New - CVE-2026-53279 2026-06-27 05:17 2026-06-27 Show GitHub Exploit DB Packet Storm
463 - - - In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocated before destroying it __destroy_component_cfg() is called to free the config… New - CVE-2026-53278 2026-06-27 05:17 2026-06-27 Show GitHub Exploit DB Packet Storm
464 8.1 HIGH
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints authorized access using credential:read rather than cre… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-45732 2026-06-27 05:17 2026-06-24 Show GitHub Exploit DB Packet Storm
465 7.2 HIGH
Network 		- - Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a … New CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2026-13372 2026-06-27 05:16 2026-06-27 Show GitHub Exploit DB Packet Storm
466 8.8 HIGH
Network 		quest netvault_backup Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVa… New CWE-79
Cross-site Scripting 		CVE-2026-7569 2026-06-27 05:16 2026-06-25 Show GitHub Exploit DB Packet Storm
467 8.8 HIGH
Network 		unraid unraid Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authenti… New CWE-78
OS Command  		CVE-2026-9773 2026-06-27 05:15 2026-06-25 Show GitHub Exploit DB Packet Storm
468 7.4 HIGH
Network 		yt-dlp_project yt-dlp yt-dlp is a command-line audio/video downloader. From 2023.09.24 until 2026.06.09, if curl is used as an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect… New CWE-200
Information Exposure 		CVE-2026-50019 2026-06-27 05:12 2026-06-24 Show GitHub Exploit DB Packet Storm
469 9.6 CRITICAL
Network 		yt-dlp_project yt-dlp yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as .desktop, .url, .web… New CWE-641
 Improper Restriction of Names for Files and Other Resources 		CVE-2026-50023 2026-06-27 05:12 2026-06-24 Show GitHub Exploit DB Packet Storm
470 9.6 CRITICAL
Network 		yt-dlp_project yt-dlp yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt-dlp passes insuffic… New CWE-74
Injection 		CVE-2026-50574 2026-06-27 05:11 2026-06-24 Show GitHub Exploit DB Packet Storm