Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
71 8.1 重要
Network 		VMware spring for graphql VMwareのspring for graphqlにおける同一生成元ポリシー違反に関する脆弱性 New CWE-346
同一生成元ポリシー違反 		CVE-2026-41700 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
72 7.5 重要
Network 		VMware spring for graphql VMwareのspring for graphqlにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-41856 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
73 7.5 重要
Network 		tdengine tdengine tdengineにおける整数アンダーフローの脆弱性 New CWE-191
整数アンダーフロー 		CVE-2026-42542 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
74 8.1 重要
Network 		マイクロソフト Microsoft Teams Android 用の Microsoft Teams の情報漏えいの脆弱性 New CWE-74
インジェクション 		CVE-2026-42835 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
75 9.8 緊急
Network 		QNAP Systems qumagie QNAP Systemsのqumagieにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44083 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
76 7.5 重要
Network 		axios project axios axios projectのaxiosにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-44486 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
77 7.5 重要
Network 		axios project axios axios projectのaxiosにおける送信データへの重要な情報の挿入に関する脆弱性 New CWE-201
送信データへの重要な情報の挿入 		CVE-2026-44487 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
78 7.5 重要
Network 		axios project axios axios projectのaxiosにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-44488 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
79 8.6 重要
Network 		axios project axios axios projectのaxiosにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-44492 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
80 8.7 重要
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 New CWE-1321
CWE-441
CVE-2026-44494 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2631 4.7 MEDIUM
Network 		shopify react-router React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS… CWE-79
Cross-site Scripting 		CVE-2026-33245 2026-06-5 03:43 2026-06-3 Show GitHub Exploit DB Packet Storm
2632 7.3 HIGH
Network 		securly securly Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data. CWE-798
 Use of Hard-coded Credentials 		CVE-2026-8876 2026-06-5 03:42 2026-06-4 Show GitHub Exploit DB Packet Storm
2633 7.5 HIGH
Network 		securly securly Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that… CWE-326
Inadequate Encryption Strength 		CVE-2026-8878 2026-06-5 03:42 2026-06-4 Show GitHub Exploit DB Packet Storm
2634 7.5 HIGH
Network 		securly securly Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime. This script is NOT declared in manif… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-8879 2026-06-5 03:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2635 6.5 MEDIUM
Network 		libxls_project libxls libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not ful… CWE-457
 Use of Uninitialized Variable 		CVE-2026-26824 2026-06-5 03:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2636 7.7 HIGH
Network 		openstack ironic OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info. CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2026-46447 2026-06-5 03:41 2026-06-4 Show GitHub Exploit DB Packet Storm
2637 4.9 MEDIUM
Network 		openstack ironic OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template. CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2026-44917 2026-06-5 03:40 2026-06-4 Show GitHub Exploit DB Packet Storm
2638 8.1 HIGH
Network 		openstack ironic OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image. CWE-23
 Relative Path Traversal 		CVE-2026-48681 2026-06-5 03:40 2026-06-4 Show GitHub Exploit DB Packet Storm
2639 5.9 MEDIUM
Local 		libexpat_project libexpat libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.… CWE-416
 Use After Free 		CVE-2026-50219 2026-06-5 03:39 2026-06-4 Show GitHub Exploit DB Packet Storm
2640 7.5 HIGH
Network 		solarwinds web_help_desk SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-28299 2026-06-5 03:39 2026-06-3 Show GitHub Exploit DB Packet Storm