Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3481	7.5	重要 Network	アルバネットワークス株式会社	SD-WAN ArubaOS	アルバネットワークス株式会社のArubaOS等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-23826	2026-05-18 12:07	2026-05-12	Show	GitHub Exploit DB Packet Storm

3482	7.5	重要 Network	アルバネットワークス株式会社	SD-WAN ArubaOS	アルバネットワークス株式会社のArubaOS等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-23827	2026-05-18 12:07	2026-05-12	Show	GitHub Exploit DB Packet Storm

3483	7.5	重要 Network	Fleet Device Management	fleet	Fleet Device Managementのfleetにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23998	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3484	5.3	警告 Network	Fleet Device Management	fleet	Fleet Device Managementのfleetにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-24000	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3485	7.5	重要 Network	strapi	strapi	strapiにおける複数の脆弱性	CWE-200 CWE-22 CWE-943	CVE-2026-27886	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3486	6.5	警告 Network	Grafana Labs	Grafana	Grafana LabsのGrafanaにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-28376	2026-05-18 12:07	2026-05-13	Show	GitHub Exploit DB Packet Storm

3487	2.7	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-2900	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3488	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3073	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3489	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3074	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

3490	5.8	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるフィルタリングの回避に関する脆弱性	CWE-441 フィルタリング回避	CVE-2026-3160	2026-05-18 12:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2531	8.8	HIGH Network	-	-	Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)	CWE-416 Use After Free	CVE-2026-10893	2026-06-6 01:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

2532	9.6	CRITICAL Network	-	-	Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: C…	CWE-787 Out-of-bounds Write	CVE-2026-10892	2026-06-6 01:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

2533	-		-	-	sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.match without end-anchoring. This allows an attacker to bypas…	-	CVE-2026-37737	2026-06-6 01:07	2026-06-6	Show	GitHub Exploit DB Packet Storm

2534	-		-	-	The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors (IVs) for …	CWE-321 CWE-338 Use of Hard-coded Cryptographic Key Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2026-11347	2026-06-6 01:07	2026-06-5	Show	GitHub Exploit DB Packet Storm

2535	-		-	-	An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAccess function incorre…	CWE-287 Improper Authentication	CVE-2026-11345	2026-06-6 01:07	2026-06-5	Show	GitHub Exploit DB Packet Storm

2536	-		-	-	A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific proces…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-11346	2026-06-6 01:07	2026-06-5	Show	GitHub Exploit DB Packet Storm

2537	-		-	-	The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by th…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-11369	2026-06-6 01:07	2026-06-5	Show	GitHub Exploit DB Packet Storm

2538	-		-	-	An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write. When CONFIG_BT_MESH_OD_PRIV_PROXY_SRV is…	CWE-787 Out-of-bounds Write	CVE-2026-5589	2026-06-6 01:06	2026-06-5	Show	GitHub Exploit DB Packet Storm

2539	6.3	MEDIUM Network	-	-	A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c). When the TLS session cache is enabled, tls_session_…	CWE-787 Out-of-bounds Write	CVE-2026-5066	2026-06-6 01:06	2026-06-5	Show	GitHub Exploit DB Packet Storm

2540	4.5	MEDIUM Local	-	-	In Mimecast Incydr before 2.6.0, arbitrary file access can occur.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-50590	2026-06-6 01:06	2026-06-5	Show	GitHub Exploit DB Packet Storm