Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4181	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43032	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

4182	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43033	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

4183	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43034	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

4184	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-43035	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

4185	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-43036	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

4186	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43038	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

4187	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43039	2026-05-11 11:07	2026-05-1	Show	GitHub Exploit DB Packet Storm

4188	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースの初期化の不備に関する脆弱性	CWE-909 リソースの初期化の不備	CVE-2026-43040	2026-05-11 11:07	2026-05-1	Show	GitHub Exploit DB Packet Storm

4189	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-43041	2026-05-11 11:07	2026-05-1	Show	GitHub Exploit DB Packet Storm

4190	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43042	2026-05-11 11:07	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1111	9.9	CRITICAL Network	-	-	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before_request → @jwt_required() (app/rout…	CWE-639 CWE-862 CWE-863 Authorization Bypass Through User-Controlled Key Missing Authorization Incorrect Authorization	CVE-2026-45552	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1112	8.8	HIGH Network	-	-	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes…	CWE-416 Use After Free	CVE-2026-45447	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1113	9.8	CRITICAL Network	-	-	DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.	CWE-78 OS Command	CVE-2026-38615	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1114	9.8	CRITICAL Network	-	-	A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-36721	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1115	7.5	HIGH Network	-	-	An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 password hashes, via e…	CWE-200 Information Exposure	CVE-2026-36719	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1116	8.4	HIGH Local	-	-	Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.too…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-24067	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1117	8.4	HIGH Local	-	-	Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.too…	CWE-296 Improper Following of a Certificate's Chain of Trust	CVE-2026-24066	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1118	7.8	HIGH Local	-	-	Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime ent…	CWE-426 Untrusted Search Path	CVE-2026-24064	2026-06-11 00:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

1119	6.5	MEDIUM Network	-	-	A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclass definitions, the oc_superior (SUP) field length is omitted from buffer size calculations in read_schema_dse…	CWE-122 Heap-based Buffer Overflow	CVE-2026-11884	2026-06-11 00:16	2026-06-11	Show	GitHub Exploit DB Packet Storm

1120	8.3	HIGH Network	google	chrome	Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perfor…	CWE-20 Improper Input Validation	CVE-2026-11029	2026-06-11 00:16	2026-06-5	Show	GitHub Exploit DB Packet Storm