Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3751	6.5	警告 Adjacent	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software	シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-20023	2026-05-7 11:28	2026-03-4	Show	GitHub Exploit DB Packet Storm

3752	5.7	警告 Adjacent	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software	シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-20024	2026-05-7 11:28	2026-03-4	Show	GitHub Exploit DB Packet Storm

3753	8.6	重要 Network	シスコシステムズ	Adaptive Security Appliance (ASA) Software	シスコシステムズのAdaptive Security Appliance (ASA) Softwareにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性	CWE-772 有効なライフタイム後のリソースの解放の欠如	CVE-2026-20082	2026-05-7 11:28	2026-03-4	Show	GitHub Exploit DB Packet Storm

3754	5	警告 Network	Cloud Foundry, Inc.	routing release cf-deployment	Cloud Foundry, Inc.のCf-deployment等の複数製品における意図するエンドポイントとの通信チャネルの制限に関する脆弱性	CWE-923 意図するエンドポイントとの通信チャネルの不適切な制限	CVE-2026-22726	2026-05-7 11:28	2026-05-1	Show	GitHub Exploit DB Packet Storm

3755	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22740	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

3756	3.1	低 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおける重要な情報を含むキャッシュの使用に関する脆弱性	CWE-524 重要な情報を含むキャッシュの使用	CVE-2026-22741	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

3757	5.3	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22745	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

3758	8.8	重要 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP Serverにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-23918	2026-05-7 11:28	2026-05-4	Show	GitHub Exploit DB Packet Storm

3759	8.8	重要 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-24072	2026-05-7 11:28	2026-05-4	Show	GitHub Exploit DB Packet Storm

3760	9.8	緊急 Network	NVIDIA	nvflare	NVIDIAのnvflareにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-24178	2026-05-7 11:28	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1351	3.3	LOW Local	google	android	In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclos…	NVD-CWE-noinfo	CVE-2025-48616	2026-06-3 03:58	2026-06-2	Show	GitHub Exploit DB Packet Storm

1352	7.8	HIGH Local	google	android	In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to local escalation of privilege with no ad…	CWE-441 Confused Deputy	CVE-2025-48570	2026-06-3 03:58	2026-06-2	Show	GitHub Exploit DB Packet Storm

1353	7.8	HIGH Local	google	android	In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede…	NVD-CWE-noinfo	CVE-2025-32348	2026-06-3 03:50	2026-06-2	Show	GitHub Exploit DB Packet Storm

1354	6.5	MEDIUM Network	apache	airflow	A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g. `/etc/passwd` or `airflow.cfg…	CWE-59 Link Following	CVE-2026-40861	2026-06-3 03:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

1355	7.2	HIGH Network	apache	airflow	A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the `is_safe_url` check, enabling redirection from a trusted Airflow domain to an attacker-…	CWE-601 Open Redirect	CVE-2026-40961	2026-06-3 03:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

1356	4.3	MEDIUM Network	apache	airflow	The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with global Asset:read permission could enumerat…	CWE-862 Missing Authorization	CVE-2026-41014	2026-06-3 03:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

1357	7.5	HIGH Network	apache	airflow	A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against the `dag_id` resolved from the URL path whi…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-41084	2026-06-3 03:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

1358	9.1	CRITICAL Network	apache	airflow	Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashOperator(bash_command="echo value: {{ dag_run.conf['conf1'] …	CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-42252	2026-06-3 03:48	2026-06-1	Show	GitHub Exploit DB Packet Storm

1359	6.2	MEDIUM Local	google	android	In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a path traversal error. This could lead to lo…	CWE-22 CWE-269 Path Traversal Improper Privilege Management	CVE-2026-0055	2026-06-3 03:47	2026-06-2	Show	GitHub Exploit DB Packet Storm

1360	6.5	MEDIUM Network	google	android	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution priv…	CWE-190 Integer Overflow or Wraparound	CVE-2026-0052	2026-06-3 03:47	2026-06-2	Show	GitHub Exploit DB Packet Storm