Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
271	8.8	重要 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint のリモートコードが実行される脆弱性 New	CWE-22 パス・トラバーサル	CVE-2026-45454	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

272	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45462	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

273	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45464	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

274	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45465	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

275	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45479	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

276	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 24h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025 Microsoft Windows 11 25h2	Windows カーネルモードドライバーの特権の昇格の脆弱性 New	CWE-843 型の取り違え	CVE-2026-45600	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

277	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2012 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Wind…	UEFI セキュアブートのセキュリティ機能バイパスの脆弱性 New	CWE-693 保護メカニズムの不具合	CVE-2026-45656	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

278	9.8	緊急 Network	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows Server 2022 Microsoft Windows 11 23h2 Microsoft Wind…	Windows カーネルのリモートでコードが実行される脆弱性 New	CWE-122 CWE-416	CVE-2026-45657	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

279	6.8	警告 Physics	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2012 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Wind…	Windows BitLocker セキュリティ機能バイパスの脆弱性 New	CWE-284 CWE-noinfo	CVE-2026-45658	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

280	7.5	重要 Network	FreeSWITCH	FreeSWITCH	FreeSWITCHにおけるDTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 New	CWE-776 DTD の再帰的なエンティティ参照の不適切な制限	CVE-2026-45771	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2691	-	-	-	Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet.	CWE-200 Information Exposure	CVE-2026-49193	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2692	-	-	-	The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and directly enter an interactive shell interface.	CWE-287 Improper Authentication	CVE-2026-49194	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2693	-	-	-	Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft.	CWE-287 Improper Authentication	CVE-2026-49202	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2694	-	-	-	Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted.	CWE-287 Improper Authentication	CVE-2026-49203	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2695	-	-	-	Leftover debug modules contain fixed credentials for internal AWS Cognito test sandboxes, risking asset exploitation.	CWE-798 Use of Hard-coded Credentials	CVE-2026-49204	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2696	-	-	-	System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-50205	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2697	-	-	-	Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files.	CWE-78 OS Command	CVE-2026-50206	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2698	-	-	-	The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity.	CWE-22 Path Traversal	CVE-2026-50207	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2699	-	-	-	High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic.	CWE-330 Use of Insufficiently Random Values	CVE-2026-50208	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm

2700	-	-	-	Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-50209	2026-06-5 00:10	2026-06-4	Show	GitHub Exploit DB Packet Storm