Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3651 9.6 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-7321 2026-05-7 12:01 2026-04-28 Show GitHub Exploit DB Packet Storm
3652 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-119
CWE-416
CVE-2026-7322 2026-05-7 12:01 2026-04-28 Show GitHub Exploit DB Packet Storm
3653 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-7324 2026-05-7 12:01 2026-04-28 Show GitHub Exploit DB Packet Storm
3654 7.5 重要
Network 		Wireshark Wireshark Wiresharkにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-7375 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3655 7.5 重要
Network 		Wireshark Wireshark WiresharkにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-7376 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3656 7.5 重要
Network 		Wireshark Wireshark Wiresharkにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-7378 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3657 7.5 重要
Network 		Wireshark Wireshark Wiresharkにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-7379 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3658 6.1 警告
Network 		dragonexpert Recent Threads on Index dragonexpertのRecent Threads on Indexにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-25309 2026-05-7 12:01 2026-04-29 Show GitHub Exploit DB Packet Storm
3659 6.4 警告
Local 		レッドハット Web Terminal レッドハットのWeb Terminalにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-57853 2026-05-7 12:01 2026-04-8 Show GitHub Exploit DB Packet Storm
3660 8.5 重要
Network 		オラクル Oracle Life Sciences Empirica Signal オラクルのOracle Life Sciences Empirica Signalにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-21997 2026-05-7 12:01 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1401 8.1 HIGH
Network 		- - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in androThemes Cookiteer allows PHP Local File Inclusion. This issue affects Coo… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2025-68886 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1402 8.1 HIGH
Network 		- - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This issue affects Racqu… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2025-69369 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1403 5.4 MEDIUM
Network 		- - Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crew HRM: from n/a through 1.2.2. CWE-862
 Missing Authorization 		CVE-2026-27351 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1404 5.9 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emilia Projects Progress Planner allows Stored XSS. This issue affects Progress Planner: from n/… CWE-79
Cross-site Scripting 		CVE-2026-28116 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1405 8.1 HIGH
Network 		- - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Supply Co. Blueprint allows PHP Local File Inclusion. This issue affects… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2026-39552 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1406 8.1 HIGH
Network 		- - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Local File Inclusion. This issue affects Wa… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2026-39553 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1407 8.1 HIGH
Network 		- - Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-39555 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1408 5.4 MEDIUM
Network 		- - Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from… CWE-862
 Missing Authorization 		CVE-2026-49782 2026-06-2 23:43 2026-06-2 Show GitHub Exploit DB Packet Storm
1409 8.8 HIGH
Network 		openstack keystone An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditionally merges the raw JSON request body into the policy enforcement dictionary … CWE-863
 Incorrect Authorization 		CVE-2026-42999 2026-06-2 23:41 2026-05-29 Show GitHub Exploit DB Packet Storm
1410 8.1 HIGH
Network 		- - AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that allows unauthenticate… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-49121 2026-06-2 23:40 2026-06-2 Show GitHub Exploit DB Packet Storm