Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4191 7.2 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-44872 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
4192 5.5 警告
Local 		ubuntu libefiboot ubuntuのlibefibootにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-6862 2026-05-15 10:54 2026-04-22 Show GitHub Exploit DB Packet Storm
4193 9.6 緊急
Network 		Ivanti Xtraction IvantiのXtractionにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-8043 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
4194 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-8159 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
4195 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける複数の脆弱性 CWE-1321
CWE-248
CVE-2026-8161 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
4196 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける例外的な状態の処理に関する脆弱性 CWE-755
例外的な状態における不適切な処理 		CVE-2026-8162 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
4197 5.3 警告
Network 		Leon Timmermans Crypt::Argon2 Leon TimmermansのCrypt::Argon2における複数の脆弱性 CWE-126
CWE-191
CVE-2026-8463 2026-05-15 10:53 2026-05-13 Show GitHub Exploit DB Packet Storm
4198 7.2 重要
Network 		IBM IBM Security Verify Directory IBMのIBM Security Verify Directoryにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2025-36074 2026-05-15 10:53 2026-04-23 Show GitHub Exploit DB Packet Storm
4199 8.8 重要
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-43524 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
4200 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2025-71287 2026-05-15 10:53 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2391 7.1 HIGH
Network 		7-zip 7-zip 7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmwar… CWE-125
Out-of-bounds Read 		CVE-2026-48111 2026-06-9 03:16 2026-06-6 Show GitHub Exploit DB Packet Storm
2392 8.1 HIGH
Network 		7-zip 7-zip 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer ove… CWE-125
Out-of-bounds Read 		CVE-2026-48092 2026-06-9 03:16 2026-06-6 Show GitHub Exploit DB Packet Storm
2393 9.6 CRITICAL
Network 		google chrome Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo… CWE-20
 Improper Input Validation  		CVE-2026-11021 2026-06-9 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2394 4.3 MEDIUM
Network 		google chrome Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium se… CWE-284
Improper Access Control 		CVE-2026-11302 2026-06-9 03:12 2026-06-5 Show GitHub Exploit DB Packet Storm
2395 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-11300 2026-06-9 03:10 2026-06-5 Show GitHub Exploit DB Packet Storm
2396 6.5 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data v… CWE-20
 Improper Input Validation  		CVE-2026-11007 2026-06-9 03:09 2026-06-5 Show GitHub Exploit DB Packet Storm
2397 6.5 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a… CWE-20
 Improper Input Validation  		CVE-2026-11008 2026-06-9 03:09 2026-06-5 Show GitHub Exploit DB Packet Storm
2398 8.1 HIGH
Network 		google chrome Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted H… CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-11011 2026-06-9 03:09 2026-06-5 Show GitHub Exploit DB Packet Storm
2399 6.5 MEDIUM
Network 		google chrome Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted … CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-11014 2026-06-9 03:08 2026-06-5 Show GitHub Exploit DB Packet Storm
2400 8.8 HIGH
Network 		google chrome Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromi… CWE-125
Out-of-bounds Read 		CVE-2026-11301 2026-06-9 03:08 2026-06-5 Show GitHub Exploit DB Packet Storm