Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
911 9.1 緊急
Network 		Bytedance Inc. DeerFlow Bytedance Inc.のDeerFlowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40518 2026-06-8 12:28 2026-04-17 Show GitHub Exploit DB Packet Storm
912 5.3 警告
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41207 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
913 9.8 緊急
Network 		DragonSoft Gcb/fcb Government Financial Cybersecurity Configuration Audit Software DragonSoftのGcb/fcb Government Financial Cybersecurity Configuration Audit Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-4312 2026-06-8 12:28 2026-03-17 Show GitHub Exploit DB Packet Storm
914 5.5 警告
Local 		Linaro OP-TEE Trusted FirmwareのOP-TEEにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-45702 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
915 9.1 緊急
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける複数の脆弱性 CWE-125
CWE-787
CVE-2026-48040 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
916 9.8 緊急
Network 		マイクロソフト Azure HorizonDB Azure HorizonDB Elevation of Privilege Vulnerability CWE-290
スプーフィングによる認証回避 		CVE-2026-48567 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
917 7.5 重要
Network 		マイクロソフト Microsoft Exchange Online Microsoft Exchange Online Information Disclosure Vulnerability CWE-285
不適切な認可 		CVE-2026-48579 2026-06-8 12:27 2026-06-4 Show GitHub Exploit DB Packet Storm
918 9.1 緊急
Network 		CHORNY Apache::Session::Generate::ModUniqueId CHORNYのApache::Session::Generate::ModUniqueIdにおける予測可能な数字や識別子の生成に関する脆弱性 CWE-340
予測可能な数字や識別子の生成 		CVE-2026-5081 2026-06-8 12:27 2026-05-6 Show GitHub Exploit DB Packet Storm
919 7.1 重要
Adjacent 		Securly, Inc. Securly Securly, Inc.のSecurlyにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-8874 2026-06-8 12:27 2026-06-3 Show GitHub Exploit DB Packet Storm
920 7.5 重要
Network 		Securly, Inc. Securly Securly, Inc.のSecurlyにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-8881 2026-06-8 12:27 2026-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3251 7.3 HIGH
Network 		- - Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41. CWE-862
 Missing Authorization 		CVE-2026-42675 2026-06-2 02:57 2026-06-2 Show GitHub Exploit DB Packet Storm
3252 6.5 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stored XSS. This issue affects myCred: from n/a through 3.0.4. CWE-79
Cross-site Scripting 		CVE-2026-42676 2026-06-2 02:57 2026-06-2 Show GitHub Exploit DB Packet Storm
3253 7.5 HIGH
Network 		- - Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Document Revisions: from n/a be… CWE-862
 Missing Authorization 		CVE-2026-42677 2026-06-2 02:57 2026-06-2 Show GitHub Exploit DB Packet Storm
3254 7.1 HIGH
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP: from n/a through … CWE-79
Cross-site Scripting 		CVE-2026-42678 2026-06-2 02:57 2026-06-2 Show GitHub Exploit DB Packet Storm
3255 6.5 MEDIUM
Network 		- - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mamunur Rashid Classified Listing allows Path Traversal. This issue affects Classified Listing: from n… CWE-22
Path Traversal 		CVE-2026-42679 2026-06-2 02:57 2026-06-2 Show GitHub Exploit DB Packet Storm
3256 6.5 MEDIUM
Network 		rust-lang cargo Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary na… CWE-647
 Use of Non-Canonical URL Paths for Authorization Decisions 		CVE-2026-5222 2026-06-2 02:56 2026-05-25 Show GitHub Exploit DB Packet Storm
3257 7.8 HIGH
Local 		mediatek mt6739_firmware
mt6761_firmware
mt6765_firmware
mt6768_firmware
mt6781_firmware
mt6789_firmware
mt6835_firmware
mt6853_firmware
mt6855_firmware
mt6877_firmware
mt6878_fi… 		In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U… CWE-787
 Out-of-bounds Write 		CVE-2026-20455 2026-06-2 02:56 2026-06-1 Show GitHub Exploit DB Packet Storm
3258 5.5 MEDIUM
Local 		mediatek mt7902_firmware
mt7920_firmware
mt7921_firmware
mt7922_firmware
mt7925_firmware
mt7927_firmware 		In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed fo… CWE-787
 Out-of-bounds Write 		CVE-2026-20456 2026-06-2 02:54 2026-06-1 Show GitHub Exploit DB Packet Storm
3259 9.8 CRITICAL
Network 		redhat
samba 		openshift_container_platform
samba
enterprise_linux 		A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution charac… CWE-78
OS Command  		CVE-2026-4480 2026-06-2 02:53 2026-05-27 Show GitHub Exploit DB Packet Storm
3260 5.3 MEDIUM
Network 		rust-lang cargo Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The… CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-5223 2026-06-2 02:52 2026-05-25 Show GitHub Exploit DB Packet Storm