Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3651	4.2	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-7912	2026-05-8 12:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

3652	7.8	重要 Local	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-7913	2026-05-8 12:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

3653	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-7914	2026-05-8 12:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

3654	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-7915	2026-05-8 12:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

3655	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-7916	2026-05-8 12:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

3656	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7917	2026-05-8 12:18	2026-05-6	Show	GitHub Exploit DB Packet Storm

3657	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7918	2026-05-8 12:18	2026-05-6	Show	GitHub Exploit DB Packet Storm

3658	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7919	2026-05-8 12:18	2026-05-6	Show	GitHub Exploit DB Packet Storm

3659	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7920	2026-05-8 12:18	2026-05-6	Show	GitHub Exploit DB Packet Storm

3660	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7921	2026-05-8 12:18	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1021	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_l…	-	CVE-2026-46242	2026-06-5 16:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

1022	3.3	LOW Local	-	-	HCL BigFix Cloud Lifecycle Management is affected by lack of input validation. This low-level flaw allows unauthorized access and may lead to information exposure.	-	CVE-2025-62338	2026-06-5 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

1023	4.1	MEDIUM Network	-	-	Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page	CWE-79 Cross-site Scripting	CVE-2026-37700	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1024	8.1	HIGH Adjacent	-	-	Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabl…	CWE-306 Missing Authentication for Critical Function	CVE-2026-36603	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1025	4.3	MEDIUM Adjacent	-	-	Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action. An unauthenticated attacker on the adjacent network can obtain a raw …	CWE-200 Information Exposure	CVE-2026-36602	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1026	7.5	HIGH Network	google	chrome	Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome…	CWE-843 Type Confusion	CVE-2026-10022	2026-06-5 11:16	2026-05-29	Show	GitHub Exploit DB Packet Storm

1027	4.7	MEDIUM Local	linaro	op-tee	OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of t…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-45614	2026-06-5 09:20	2026-06-4	Show	GitHub Exploit DB Packet Storm

1028	9.8	CRITICAL Network	acer	predator_connect_w6x_firmware	Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.	CWE-77 Command Injection	CVE-2026-49199	2026-06-5 04:44	2026-05-29	Show	GitHub Exploit DB Packet Storm

1029	9.6	CRITICAL Network	huggingface	transformers	A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-5241	2026-06-5 03:54	2026-06-3	Show	GitHub Exploit DB Packet Storm

1030	6.5	MEDIUM Network	koha	koha	Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-26379	2026-06-5 03:54	2026-06-4	Show	GitHub Exploit DB Packet Storm