Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4161 9.8 緊急
Network
OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-42217 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
4162 8.8 重要
Network
litellm litellm LiteLLMにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-42271 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
4163 8.7 重要
Network
NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-22
CWE-61
CVE-2026-42275 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
4164 5.8 警告
Network
solidtime solidtime solidtimeにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-42279 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
4165 7.5 重要
Network
マイクロソフト Azure DevOps Azure DevOps Information Disclosure Vulnerability CWE-200
情報漏えい
CVE-2026-42826 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
4166 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-43017 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
4167 8.8 重要
Adjacent
Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-43018 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
4168 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-43019 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
4169 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-43020 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
4170 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-43021 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1101 - - - A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks… CWE-306
Missing Authentication for Critical Function
CVE-2026-8335 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1102 4.3 MEDIUM
Network
- - A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite sys… CWE-749
 Exposed Dangerous Method or Function
CVE-2026-7516 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1103 7.0 HIGH
Local
- - A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges. CWE-290
 Authentication Bypass by Spoofing
CVE-2026-6090 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1104 7.1 HIGH
Network
- - libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c. CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-53689 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1105 9.6 CRITICAL
Adjacent
- - A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed g… CWE-59
Link Following
CVE-2026-53476 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1106 9.3 CRITICAL
Adjacent
- - A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Mid… CWE-295
Improper Certificate Validation 
CVE-2026-53475 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1107 9.6 CRITICAL
Network
- - A flaw was found in migration-planner. A remote authenticated attacker could exploit this vulnerability by uploading a specially crafted RVTools .xlsx file. Due to improper input sanitization, malici… CWE-89
SQL Injection
CVE-2026-53474 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1108 7.3 HIGH
Network
- - A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organizational user click… CWE-79
Cross-site Scripting
CVE-2026-53473 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1109 9.6 CRITICAL
Network
- - A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. This flaw allows the attacker… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-53470 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm
1110 9.1 CRITICAL
Network
- - A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. T… CWE-306
Missing Authentication for Critical Function
CVE-2026-53469 2026-06-11 00:16 2026-06-11 Show GitHub Exploit DB Packet Storm