Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3111 7.8 重要
Local
Zoom Video Communications, Inc. Zoom Workplace VDI
Zoom Rooms
Zoom Workplace Desktop
Zoom Video Communications, Inc.のZoom Rooms等の複数製品における権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-30902 2026-05-18 12:18 2026-03-11 Show GitHub Exploit DB Packet Storm
3112 9.8 緊急
Network
Zoom Video Communications, Inc. Zoom Workplace VDI
Zoom Workplace Desktop
Zoom Video Communications, Inc.のZoom Workplace Desktop等の複数製品における複数の脆弱性 CWE-610
CWE-73
CVE-2026-30903 2026-05-18 12:18 2026-03-11 Show GitHub Exploit DB Packet Storm
3113 7.8 重要
Local
lightningai pytorch lightning Lightning AIのPyTorch Lightningにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-31221 2026-05-18 12:18 2026-05-12 Show GitHub Exploit DB Packet Storm
3114 7.5 重要
Adjacent
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows ネイティブ WiFi ミニポート ドライバーのリモートでコードが実行される脆弱性 CWE-362
CWE-416
CVE-2026-32161 2026-05-18 12:18 2026-05-12 Show GitHub Exploit DB Packet Storm
3115 6.7 警告
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows リッチ テキスト エディットの特権昇格の脆弱性 CWE-415
二重解放
CVE-2026-32170 2026-05-18 12:18 2026-05-12 Show GitHub Exploit DB Packet Storm
3116 4.4 警告
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows フィルタリング プラットフォーム (WFP) のセキュリティ機能のバイパスの脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-32209 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
3117 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows Event Logging Service の特権の昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-33834 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
3118 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Wind…
Windows Cloud Files Mini Filter ドライバーの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-33835 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
3119 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows TCP/IP Local の特権昇格の脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-33837 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
3120 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows メッセージ キュー (MSMQ) の特権昇格の脆弱性 CWE-415
二重解放
CVE-2026-33838 2026-05-18 12:17 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2641 4.3 MEDIUM
Network
hcltech icontrol HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain… CWE-209
Information Exposure Through an Error Message
CVE-2025-52606 2026-06-5 03:38 2026-06-4 Show GitHub Exploit DB Packet Storm
2642 4.3 MEDIUM
Network
hcltech icontrol HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path… CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2025-52608 2026-06-5 03:38 2026-06-4 Show GitHub Exploit DB Packet Storm
2643 4.3 MEDIUM
Network
mozilla firefox JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. CWE-843
Type Confusion
CVE-2026-10702 2026-06-5 03:38 2026-06-3 Show GitHub Exploit DB Packet Storm
2644 5.3 MEDIUM
Network
openquantumsafe liboqs liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT … CWE-125
Out-of-bounds Read
CVE-2026-46344 2026-06-5 03:38 2026-05-30 Show GitHub Exploit DB Packet Storm
2645 5.3 MEDIUM
Network
openquantumsafe liboqs liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT … CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read
CVE-2026-44518 2026-06-5 03:36 2026-05-30 Show GitHub Exploit DB Packet Storm
2646 5.3 MEDIUM
Network
hcltech icontrol HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers. CWE-693
 Protection Mechanism Failure
CVE-2025-52609 2026-06-5 03:34 2026-06-4 Show GitHub Exploit DB Packet Storm
2647 4.3 MEDIUM
Network
hcltech icontrol HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to an undefined property being accessed in the application's JavaScript code. Spec… CWE-209
Information Exposure Through an Error Message
CVE-2025-52611 2026-06-5 03:34 2026-06-4 Show GitHub Exploit DB Packet Storm
2648 8.8 HIGH
Network
hcltech icontrol HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input param… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2025-52612 2026-06-5 03:32 2026-06-4 Show GitHub Exploit DB Packet Storm
2649 5.4 MEDIUM
Adjacent
macgregor interschalt_vdr_g4e_firmware Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks. CWE-916
 Use of Password Hash With Insufficient Computational Effort
CVE-2026-44611 2026-06-5 03:30 2026-05-30 Show GitHub Exploit DB Packet Storm
2650 5.4 MEDIUM
Adjacent
macgregor interschalt_vdr_g4e_firmware An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes. CWE-522
 Insufficiently Protected Credentials
CVE-2026-42951 2026-06-5 03:30 2026-05-30 Show GitHub Exploit DB Packet Storm