Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3901	7.5	重要 Network	V2Board	V2Board	V2BoardにおけるGET リクエストにおけるクエリ文字列からの情報漏えいに関する脆弱性	CWE-598 GET リクエストにおけるクエリ文字列からの情報漏えい	CVE-2026-37504	2026-05-13 10:26	2026-05-1	Show	GitHub Exploit DB Packet Storm

3902	4.9	警告 Network	V2Board	V2Board	V2BoardにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-37505	2026-05-13 10:26	2026-05-1	Show	GitHub Exploit DB Packet Storm

3903	5.4	警告 Network	Apache Software Foundation	Apache-airflow-providers-keycloak	Apache Software FoundationのApache-airflow-providers-keycloakにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-40948	2026-05-13 10:26	2026-04-18	Show	GitHub Exploit DB Packet Storm

3904	6.5	警告 Adjacent	ウォッチガード・テクノロジー	WatchGuard Agent	ウォッチガード・テクノロジーのWatchGuard Agentにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-41286	2026-05-13 10:26	2026-05-6	Show	GitHub Exploit DB Packet Storm

3905	6.5	警告 Adjacent	ウォッチガード・テクノロジー	WatchGuard Agent	ウォッチガード・テクノロジーのWatchGuard Agentにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-41287	2026-05-13 10:26	2026-05-6	Show	GitHub Exploit DB Packet Storm

3906	7.8	重要 Local	ウォッチガード・テクノロジー	WatchGuard Agent	ウォッチガード・テクノロジーのWatchGuard Agentにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-41288	2026-05-13 10:26	2026-05-6	Show	GitHub Exploit DB Packet Storm

3907	9.9	緊急 Network	Mozilla Foundation	0DIN Scanner	Mozilla Foundationの0DIN Scannerにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41512	2026-05-13 10:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

3908	9.8	緊急 Network	D-Link Systems, Inc.	DIR-456U Firmware	D-Link CorporationのDIR-456U Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-42376	2026-05-13 10:26	2026-05-4	Show	GitHub Exploit DB Packet Storm

3909	6.5	警告 Network	langflow	Langflow Desktop	langflowのLangflow Desktopにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-4502	2026-05-13 10:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

3910	7.5	重要 Network	langflow	Langflow Desktop	langflowのLangflow Desktopにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-4503	2026-05-13 10:26	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
771	7.3	HIGH Network	apache	http_server	Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67. Update	CWE-416 Use After Free	CVE-2026-48913	2026-06-11 04:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

772	8.8	HIGH Network	hcltech	digital_experience digital_experience_compose	HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the… Update	CWE-78 OS Command	CVE-2026-21837	2026-06-11 04:25	2026-06-5	Show	GitHub Exploit DB Packet Storm

773	6.1	MEDIUM Network	hcltech	digital_experience_compose digital_experience	HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause the application to behave in unexpected … Update	CWE-601 Open Redirect	CVE-2026-21826	2026-06-11 04:24	2026-06-5	Show	GitHub Exploit DB Packet Storm

774	6.1	MEDIUM Network	hcltech	digital_experience_compose digital_experience	HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser. Update	CWE-79 Cross-site Scripting	CVE-2026-21825	2026-06-11 04:24	2026-06-5	Show	GitHub Exploit DB Packet Storm

775	8.8	HIGH Network	google	chrome	Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low) Update	CWE-125 Out-of-bounds Read	CVE-2026-11279	2026-06-11 04:22	2026-06-5	Show	GitHub Exploit DB Packet Storm

776	6.5	MEDIUM Network	google	chrome	Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: … Update	CWE-346 Origin Validation Error	CVE-2026-11278	2026-06-11 04:19	2026-06-5	Show	GitHub Exploit DB Packet Storm

777	-		-	-	bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompres… Update	CWE-121 Stack-based Buffer Overflow	CVE-2026-9669	2026-06-11 04:16	2026-06-9	Show	GitHub Exploit DB Packet Storm

778	-		-	-	An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation. Update	CWE-20 Improper Input Validation	CVE-2026-9211	2026-06-11 04:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

779	-		-	-	Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu… Update	CWE-20 Improper Input Validation	CVE-2026-9210	2026-06-11 04:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

780	7.5	HIGH Network	securly	securly	Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes). Update	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-8889	2026-06-11 04:16	2026-06-4	Show	GitHub Exploit DB Packet Storm