Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
471 4.3 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける初期化されていない変数の使用に関する脆弱性 New CWE-457
初期化されていない変数の使用 		CVE-2026-11668 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
472 5.3 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 New CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-11669 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
473 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-11672 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
474 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-11676 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
475 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-11681 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
476 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-11682 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
477 8.1 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-11689 2026-06-11 16:13 2026-06-9 Show GitHub Exploit DB Packet Storm
478 7.8 重要
Local 		シスコシステムズ Cisco SD-WAN vSmart Controller シスコシステムズのCisco Catalyst SD-WAN Manager等の複数製品におけるエンコードおよびエスケープに関する脆弱性 New CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-20245 2026-06-11 16:13 2026-06-4 Show GitHub Exploit DB Packet Storm
479 6.1 警告
Network 		Apache Software Foundation answer Apache Software Foundationのanswerにおける代替 XSS 構文の不適切な無効化に関する脆弱性 New CWE-87
代替 XSS 構文の不適切な無効化 		CVE-2026-25688 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
480 6.1 警告
Network 		Apache Software Foundation answer Apache Software Foundationのanswerにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 New CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2026-25699 2026-06-11 16:12 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2981 3.3 LOW
Local 		google android In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclos… NVD-CWE-noinfo
CVE-2025-48616 2026-06-3 03:58 2026-06-2 Show GitHub Exploit DB Packet Storm
2982 7.8 HIGH
Local 		google android In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to local escalation of privilege with no ad… CWE-441
Confused Deputy 		CVE-2025-48570 2026-06-3 03:58 2026-06-2 Show GitHub Exploit DB Packet Storm
2983 7.8 HIGH
Local 		google android In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges neede… NVD-CWE-noinfo
CVE-2025-32348 2026-06-3 03:50 2026-06-2 Show GitHub Exploit DB Packet Storm
2984 6.5 MEDIUM
Network 		apache airflow A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g. `/etc/passwd` or `airflow.cfg… CWE-59
Link Following 		CVE-2026-40861 2026-06-3 03:49 2026-06-1 Show GitHub Exploit DB Packet Storm
2985 7.2 HIGH
Network 		apache airflow A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the `is_safe_url` check, enabling redirection from a trusted Airflow domain to an attacker-… CWE-601
Open Redirect 		CVE-2026-40961 2026-06-3 03:49 2026-06-1 Show GitHub Exploit DB Packet Storm
2986 4.3 MEDIUM
Network 		apache airflow The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with global Asset:read permission could enumerat… CWE-862
 Missing Authorization 		CVE-2026-41014 2026-06-3 03:49 2026-06-1 Show GitHub Exploit DB Packet Storm
2987 7.5 HIGH
Network 		apache airflow A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against the `dag_id` resolved from the URL path whi… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-41084 2026-06-3 03:49 2026-06-1 Show GitHub Exploit DB Packet Storm
2988 9.1 CRITICAL
Network 		apache airflow Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashOperator(bash_command="echo value: {{ dag_run.conf['conf1'] … CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-42252 2026-06-3 03:48 2026-06-1 Show GitHub Exploit DB Packet Storm
2989 6.2 MEDIUM
Local 		google android In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a path traversal error. This could lead to lo… CWE-22
CWE-269
Path Traversal
 Improper Privilege Management 		CVE-2026-0055 2026-06-3 03:47 2026-06-2 Show GitHub Exploit DB Packet Storm
2990 6.5 MEDIUM
Network 		google android In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution priv… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-0052 2026-06-3 03:47 2026-06-2 Show GitHub Exploit DB Packet Storm