Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3771	9.1	緊急 Network	Ivanti	endpoint manager mobile	Ivantiのendpoint manager mobileにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-5787	2026-05-11 10:54	2026-05-7	Show	GitHub Exploit DB Packet Storm

3772	9.8	緊急 Network	Ivanti	endpoint manager mobile	Ivantiのendpoint manager mobileにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-5788	2026-05-11 10:54	2026-05-7	Show	GitHub Exploit DB Packet Storm

3773	8.8	重要 Network	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2026-6819	2026-05-11 10:54	2026-04-21	Show	GitHub Exploit DB Packet Storm

3774	8.2	重要 Network	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2026-6823	2026-05-11 10:54	2026-04-21	Show	GitHub Exploit DB Packet Storm

3775	5.3	警告 Network	Django Software Foundation	Django	Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性	CWE-524 重要な情報を含むキャッシュの使用	CVE-2026-6907	2026-05-11 10:54	2026-05-5	Show	GitHub Exploit DB Packet Storm

3776	7.2	重要 Network	Ivanti	endpoint manager mobile	Ivantiのendpoint manager mobileにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-6973	2026-05-11 10:54	2026-05-7	Show	GitHub Exploit DB Packet Storm

3777	9.1	緊急 Network	Ivanti	endpoint manager mobile	Ivantiのendpoint manager mobileにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-7821	2026-05-11 10:54	2026-05-7	Show	GitHub Exploit DB Packet Storm

3778	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-7910	2026-05-11 10:54	2026-05-6	Show	GitHub Exploit DB Packet Storm

3779	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-7957	2026-05-11 10:54	2026-05-6	Show	GitHub Exploit DB Packet Storm

3780	5.4	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-8006	2026-05-11 10:54	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1651	9.1	CRITICAL Network	-	-	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packets, ipv6_find_hdr() …	-	CVE-2026-46244	2026-06-5 16:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

1652	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid,…	CWE-20 Improper Input Validation	CVE-2026-46243	2026-06-5 16:16	2026-06-2	Show	GitHub Exploit DB Packet Storm

1653	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_l…	-	CVE-2026-46242	2026-06-5 16:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

1654	3.3	LOW Local	-	-	HCL BigFix Cloud Lifecycle Management is affected by lack of input validation. This low-level flaw allows unauthorized access and may lead to information exposure.	-	CVE-2025-62338	2026-06-5 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

1655	4.1	MEDIUM Network	-	-	Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page	CWE-79 Cross-site Scripting	CVE-2026-37700	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1656	8.1	HIGH Adjacent	-	-	Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabl…	CWE-306 Missing Authentication for Critical Function	CVE-2026-36603	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1657	4.3	MEDIUM Adjacent	-	-	Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action. An unauthenticated attacker on the adjacent network can obtain a raw …	CWE-200 Information Exposure	CVE-2026-36602	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

1658	7.5	HIGH Network	google	chrome	Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome…	CWE-843 Type Confusion	CVE-2026-10022	2026-06-5 11:16	2026-05-29	Show	GitHub Exploit DB Packet Storm

1659	4.7	MEDIUM Local	linaro	op-tee	OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of t…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-45614	2026-06-5 09:20	2026-06-4	Show	GitHub Exploit DB Packet Storm

1660	9.8	CRITICAL Network	acer	predator_connect_w6x_firmware	Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.	CWE-77 Command Injection	CVE-2026-49199	2026-06-5 04:44	2026-05-29	Show	GitHub Exploit DB Packet Storm