Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3451	5.4	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-12669	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

3452	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2025-13874	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

3453	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける入力で指定された数量の不適切な検証に関する脆弱性	CWE-1284 入力で指定された数量の不適切な検証	CVE-2025-14869	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

3454	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2025-14870	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

3455	5.6	警告 Network	デル	elastic cloud storage Dell ObjectScale	デルのelastic cloud storage等の複数製品における認証回避の脆弱性	CWE-302 認証回避の脆弱性	CVE-2025-43992	2026-05-18 12:08	2026-05-11	Show	GitHub Exploit DB Packet Storm

3456	6.7	警告 Local	フォーティネット	FortiAP-U FortiAP FortiAP-W2	フォーティネットのFortiAP-U等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-53680	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3457	7.2	重要 Network	フォーティネット	FortiMail	フォーティネットのFortiMailにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-53681	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3458	8.8	重要 Network	フォーティネット	FortiOS	フォーティネットのFortiOSにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2025-53844	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3459	6.7	警告 Local	フォーティネット	FortiAP FortiAP-W2	フォーティネットのFortiAP-W2等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-53870	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3460	5.3	警告 Network	strapi	strapi	strapiにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2025-64526	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2601	5.5	MEDIUM Local	ni	ni-pal	Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability aff…	CWE-476 NULL Pointer Dereference	CVE-2026-8035	2026-06-6 00:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

2602	7.8	HIGH Local	ni	ni-pal	Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and p…	CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input	CVE-2026-8036	2026-06-6 00:10	2026-06-3	Show	GitHub Exploit DB Packet Storm

2603	-		-	-	Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` which matches newlines (allowing embedded newlines to pass), TLSA `matchingType=0`…	CWE-74 Injection	CVE-2026-41237	2026-06-6 00:09	2026-06-5	Show	GitHub Exploit DB Packet Storm

2604	7.6	HIGH Network	-	-	Froxlor is open source server administration software. Prior to version 2.3.7, the `DomainZones.add` API endpoint does not sanitize newline characters in TXT record content. An authenticated customer…	CWE-74 Injection	CVE-2026-41234	2026-06-6 00:09	2026-06-5	Show	GitHub Exploit DB Packet Storm

2605	8.8	HIGH Network	-	-	Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H…	CWE-20 CWE-94 CWE-119 Improper Input Validation Code Injection Incorrect Access of Indexable Resource ('Range Error')	CVE-2026-10904	2026-06-6 00:02	2026-06-5	Show	GitHub Exploit DB Packet Storm

2606	-		-	-	Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted…	CWE-20 Improper Input Validation	CVE-2026-10981	2026-06-6 00:02	2026-06-5	Show	GitHub Exploit DB Packet Storm

2607	-		-	-	Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)	CWE-125 Out-of-bounds Read	CVE-2026-11061	2026-06-6 00:02	2026-06-5	Show	GitHub Exploit DB Packet Storm

2608	-		-	-	Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch…	CWE-416 Use After Free	CVE-2026-11065	2026-06-6 00:02	2026-06-5	Show	GitHub Exploit DB Packet Storm

2609	-		-	-	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi…	CWE-20 Improper Input Validation	CVE-2026-11066	2026-06-6 00:02	2026-06-5	Show	GitHub Exploit DB Packet Storm

2610	8.1	HIGH Network	-	-	Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome …	CWE-416 Use After Free	CVE-2026-11185	2026-06-6 00:02	2026-06-5	Show	GitHub Exploit DB Packet Storm