Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4101	9.8	緊急 Network	JetBrains	Junie	JetBrainsのJunieにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-41153	2026-04-30 12:27	2026-04-17	Show	GitHub Exploit DB Packet Storm

4102	8.1	重要 Network	Statamic	Statamic	Statamicにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性	CWE-470 クラスまたはコードを選択する外部から制御された入力の使用	CVE-2026-41175	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

4103	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41176	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4104	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける複数の脆弱性	CWE-306 CWE-78	CVE-2026-41179	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4105	9.9	緊急 Network	Froxlor	Froxlor	FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2026-41228	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4106	9.1	緊急 Network	Froxlor	Froxlor	Froxlorにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41229	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4107	8.5	重要 Network	Froxlor	Froxlor	FroxlorにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-41230	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4108	7.5	重要 Network	Froxlor	Froxlor	Froxlorにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41231	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4109	5	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41232	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4110	5.4	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41233	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
261	7.5	HIGH Network	-	-	ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform m… New	CWE-121 Stack-based Buffer Overflow	CVE-2026-50031	2026-06-3 15:16	2026-06-3	Show	GitHub Exploit DB Packet Storm

262	9.0	CRITICAL Network	-	-	A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is config… Update	CWE-78 OS Command	CVE-2026-4408	2026-06-3 15:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

263	8.0	HIGH Adjacent	-	-	A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and… Update	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-3012	2026-06-3 15:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

264	8.8	HIGH Network	-	-	@pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool() function in src/core/agent/tools.ts constructs a shell command by concatenati… Update	CWE-78 OS Command	CVE-2026-36044	2026-06-3 13:17	2026-05-27	Show	GitHub Exploit DB Packet Storm

265	8.3	HIGH Network	google	chrome	Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… Update	CWE-416 Use After Free	CVE-2026-10000	2026-06-3 11:32	2026-05-29	Show	GitHub Exploit DB Packet Storm

266	6.5	MEDIUM Network	google	chrome	Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi… Update	CWE-457 Use of Uninitialized Variable	CVE-2026-10008	2026-06-3 11:31	2026-05-29	Show	GitHub Exploit DB Packet Storm

267	5.0	MEDIUM Network	google	chrome	Inappropriate implementation in Input in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTM… Update	CWE-346 Origin Validation Error	CVE-2026-10010	2026-06-3 11:31	2026-05-29	Show	GitHub Exploit DB Packet Storm

268	3.1	LOW Network	google	chrome	Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Ch… Update	CWE-200 Information Exposure	CVE-2026-10011	2026-06-3 11:30	2026-05-29	Show	GitHub Exploit DB Packet Storm

269	8.3	HIGH Network	google	chrome	Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML p… Update	CWE-125 Out-of-bounds Read	CVE-2026-10017	2026-06-3 11:30	2026-05-29	Show	GitHub Exploit DB Packet Storm

270	9.0	CRITICAL Network	google	chrome	Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a cra… Update	CWE-416 Use After Free	CVE-2026-9881	2026-06-3 11:30	2026-05-29	Show	GitHub Exploit DB Packet Storm