Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける権限管理に関する脆弱性 New	CWE-269 不適切な権限管理	CVE-2026-12018	2026-06-26 11:48	2026-06-11	Show	GitHub Exploit DB Packet Storm

252	5.5	警告 Local	東芝	Generic IO & Memory Access ドライバー	東芝製およびDynabook製PC搭載Generic IO & Memory Access ドライバーのIOCTLインタフェースに対するアクセス制御が不十分 New	CWE-782 不十分なアクセス制御による IOCTL の公開	CVE-2026-56129	2026-06-26 09:44	2026-06-25	Show	GitHub Exploit DB Packet Storm

253	6.7	警告 Local	ソニー株式会社	Optical Disc Archive Software	Optical Disc Archive Software（Windows版）のインストーラにおけるインストール時の不適切なファイルアクセス権設定の脆弱性 Update	CWE-Other その他	CVE-2026-50255	2026-06-25 16:27	2026-06-16	Show	GitHub Exploit DB Packet Storm

254	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年06月23日） New	-	-	2026-06-25 10:59	2026-06-24	Show	GitHub Exploit DB Packet Storm

255	-	-	日立	Hitachi Ops Center Analyzer viewpoint Hitachi Infrastructure Analytics Advisor Hitachi Ops Center Viewpoint Hitachi Ops Center&nbs…	Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Analyzer viewpointおよびHitachi Ops Center Viewpointにおける複数の脆弱性 New	-	CVE-2023-35116 CVE-2025-24970 CVE-2025-25193 CVE-2025-48924 CVE-2025-55163 CVE-2025-58056 CVE-2025-58057	2026-06-25 09:25	2026-06-23	Show	GitHub Exploit DB Packet Storm

256	-	-	横河電機株式会社	統合情報サーバ（CIサーバ） FAST/TOOLS	横河電機製FAST/TOOLSおよびCI Serverにおける重要情報の平文送信の脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-11833	2026-06-24 14:38	2026-06-23	Show	GitHub Exploit DB Packet Storm

257	-	-	（複数のベンダ）	（複数の製品）	Microsoft Windows Recovery EnvironmentにおけるUEFI/BIOSパスワード制限回避の脆弱性	-	-	2026-06-24 14:38	2026-06-23	Show	GitHub Exploit DB Packet Storm

258	-	-	（複数のベンダ）	（複数の製品）	FastStone Image Viewerにおけるファイル解析に関する複数の脆弱性	-	-	2026-06-24 14:38	2026-06-23	Show	GitHub Exploit DB Packet Storm

259	9.8	緊急 Network	InHand Networks	IR915L-FQ39-S Firmware IR912L-FQ58 Firmware	InHand NetworksのIR912L-FQ58 Firmware等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-38714	2026-06-24 10:00	2026-06-18	Show	GitHub Exploit DB Packet Storm

260	9.8	緊急 Network	InHand Networks	IR915L-FQ39-S Firmware IR912L-FQ58 Firmware	InHand NetworksのIR912L-FQ58 Firmware等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-38715	2026-06-24 10:00	2026-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4081	5.3	MEDIUM Network	-	-	Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly calling the passkey option…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-49955	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4082	9.8	CRITICAL Network	-	-	External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.	CWE-73 External Control of File Name or Path	CVE-2026-47643	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4083	7.0	HIGH Local	-	-	Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.	CWE-416 Use After Free	CVE-2026-47293	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4084	7.2	HIGH Network	-	-	md-fileserver allows for local viewing of markdown files in a browser. Prior to version 1.10.3, a cross-site scripting (XSS) vulnerability exists in the application’s Markdown rendering logic. When u…	CWE-80 CWE-87 Basic XSS Improper Neutralization of Alternate XSS Syntax	CVE-2026-46492	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4085	7.1	HIGH Local	-	-	Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.	CWE-284 Improper Access Control	CVE-2026-45649	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4086	5.5	MEDIUM Local	-	-	Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-45647	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4087	7.8	HIGH Local	-	-	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	CWE-822 Untrusted Pointer Dereference	CVE-2026-45645	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4088	8.0	HIGH Network	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network.	CWE-79 Cross-site Scripting	CVE-2026-45644	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4089	7.5	HIGH Network	-	-	Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.	CWE-125 Out-of-bounds Read	CVE-2026-45639	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

4090	7.5	HIGH Network	-	-	Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.	CWE-400 Uncontrolled Resource Consumption	CVE-2026-45591	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm