Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
31 6.5 警告
Network 		Spring AI Community MCP Security Spring AI CommunityのMCP Securityにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-45609 2026-06-5 10:51 2026-05-29 Show GitHub Exploit DB Packet Storm
32 5.5 警告
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-20
CWE-248
CVE-2026-45676 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
33 7.5 重要
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-20
CWE-754
CVE-2026-45678 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
34 6.5 警告
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-117
CWE-532
CVE-2026-45679 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
35 7.5 重要
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-400
CWE-834
CVE-2026-45680 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
36 5.9 警告
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-125
CWE-130
CVE-2026-45681 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
37 5.5 警告
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-401
CWE-770
CVE-2026-45682 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
38 3.8 低
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-127
CWE-200
CVE-2026-45683 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
39 5.3 警告
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-126
CWE-787
CVE-2026-45684 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
40 7.5 重要
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 New CWE-20
CWE-248
CWE-704
CVE-2026-45685 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1701 7.5 HIGH
Network 		google chrome Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted … CWE-416
 Use After Free 		CVE-2026-9933 2026-05-30 03:27 2026-05-29 Show GitHub Exploit DB Packet Storm
1702 4.3 MEDIUM
Network 		google chrome Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) CWE-457
 Use of Uninitialized Variable 		CVE-2026-9935 2026-05-30 03:26 2026-05-29 Show GitHub Exploit DB Packet Storm
1703 5.0 MEDIUM
Network 		google chrome Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium secu… CWE-457
 Use of Uninitialized Variable 		CVE-2026-9942 2026-05-30 03:26 2026-05-29 Show GitHub Exploit DB Packet Storm
1704 4.2 MEDIUM
Network 		- - Insufficient validation of untrusted input in OptimizationGuide in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via … CWE-20
 Improper Input Validation  		CVE-2026-9986 2026-05-30 03:17 2026-05-29 Show GitHub Exploit DB Packet Storm
1705 8.1 HIGH
Network 		- - Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Ex… CWE-416
 Use After Free 		CVE-2026-9964 2026-05-30 03:17 2026-05-29 Show GitHub Exploit DB Packet Storm
1706 3.1 LOW
Network 		- - Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) CWE-362
Race Condition 		CVE-2026-9959 2026-05-30 03:17 2026-05-29 Show GitHub Exploit DB Packet Storm
1707 7.7 HIGH
Network 		- - Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.4, ProjectService.GetProjectFileContent returns the contents of any Docker Compose include directiv… CWE-22
Path Traversal 		CVE-2026-47179 2026-05-30 03:17 2026-05-30 Show GitHub Exploit DB Packet Storm
1708 8.8 HIGH
Network 		- - Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/{id}/templates/variables endpoint, which writes the system-wide .env.g… CWE-862
 Missing Authorization 		CVE-2026-47125 2026-05-30 03:17 2026-05-30 Show GitHub Exploit DB Packet Storm
1709 9.9 CRITICAL
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.6 and earlier, Dokploy contains a command injection vulnerability in the /docker-container-logs WebSocket endpoint. The tail and… CWE-78
OS Command  		CVE-2026-45633 2026-05-30 03:17 2026-05-30 Show GitHub Exploit DB Packet Storm
1710 9.6 CRITICAL
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.2 and earlier, Dokploy constructs shell commands using JavaScript template literals and executes them via child_process.exec() (… CWE-20
CWE-77
 Improper Input Validation 
Command Injection 		CVE-2026-45628 2026-05-30 03:17 2026-05-30 Show GitHub Exploit DB Packet Storm