Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3721	7.7	重要 Local	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおけるハードコードされた暗号鍵の使用に関する脆弱性	CWE-321 ハードコードされた暗号鍵の使用	CVE-2026-32324	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3722	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-32648	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3723	7.5	重要 Network	Anviz Global	Crosschex Standard	Anviz GlobalのCrosschex Standardにおけるアルゴリズムのダウングレードに関する脆弱性	CWE-757 アルゴリズムのダウングレード	CVE-2026-32650	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3724	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-33093	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3725	6.5	警告 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-33569	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3726	4.3	警告 Network	SAP	SAP HANA Database Explorer SAP HANA Cockpit	SAPのSAP HANA Cockpit等の複数製品における認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-34262	2026-05-7 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

3727	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-35061	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3728	9.8	緊急 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35546	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3729	8.8	重要 Network	Anviz Global	Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmwareにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-35682	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

3730	7.5	重要 Network	Belkin International	N300 firmware	U-SpeedのN300 Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-36958	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1271	5.5	MEDIUM Local	google	android	In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service with no additional e…	CWE-20 Improper Input Validation	CVE-2026-28578	2026-06-3 22:35	2026-06-2	Show	GitHub Exploit DB Packet Storm

1272	7.8	HIGH Local	google	android	In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use…	CWE-120 Classic Buffer Overflow	CVE-2026-28580	2026-06-3 22:35	2026-06-2	Show	GitHub Exploit DB Packet Storm

1273	4.0	MEDIUM Local	google	android	In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with null execution privileg…	CWE-476 NULL Pointer Dereference	CVE-2026-28581	2026-06-3 22:29	2026-06-2	Show	GitHub Exploit DB Packet Storm

1274	3.3	LOW Local	google	android	In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution pri…	CWE-269 Improper Privilege Management	CVE-2026-28586	2026-06-3 22:26	2026-06-2	Show	GitHub Exploit DB Packet Storm

1275	8.0	HIGH Adjacent	-	-	A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-3012	2026-06-3 15:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

1276	8.8	HIGH Network	-	-	@pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool() function in src/core/agent/tools.ts constructs a shell command by concatenati…	CWE-78 OS Command	CVE-2026-36044	2026-06-3 13:17	2026-05-27	Show	GitHub Exploit DB Packet Storm

1277	8.3	HIGH Network	google	chrome	Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte…	CWE-416 Use After Free	CVE-2026-10000	2026-06-3 11:32	2026-05-29	Show	GitHub Exploit DB Packet Storm

1278	6.5	MEDIUM Network	google	chrome	Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi…	CWE-457 Use of Uninitialized Variable	CVE-2026-10008	2026-06-3 11:31	2026-05-29	Show	GitHub Exploit DB Packet Storm

1279	5.0	MEDIUM Network	google	chrome	Inappropriate implementation in Input in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTM…	CWE-346 Origin Validation Error	CVE-2026-10010	2026-06-3 11:31	2026-05-29	Show	GitHub Exploit DB Packet Storm

1280	3.1	LOW Network	google	chrome	Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Ch…	CWE-200 Information Exposure	CVE-2026-10011	2026-06-3 11:30	2026-05-29	Show	GitHub Exploit DB Packet Storm