Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
911 6.5 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-3117 2026-06-3 17:02 2026-05-18 Show GitHub Exploit DB Packet Storm
912 7.3 重要
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-33462 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
913 5.3 警告
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける有効期限後または解放後のリソースの操作に関する脆弱性 CWE-672
有効期限後または解放後のリソースの操作
CVE-2026-33463 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
914 6.5 警告
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-33464 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
915 9.8 緊急
Network
オラクル Oracle Hospitality OPERA 5 Property Services オラクルのOracle Hospitality OPERA 5 Property Servicesにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-34311 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
916 9.8 緊急
Network
IBM Engineering Lifecycle Management IBMのEngineering Lifecycle Managementにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-3660 2026-06-3 17:02 2026-05-26 Show GitHub Exploit DB Packet Storm
917 7.5 重要
Network
FRRouting Project FRRouting FRRouting ProjectのFRRoutingにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-37457 2026-06-3 17:02 2026-05-1 Show GitHub Exploit DB Packet Storm
918 7.2 重要
Network
devcode openstamanager DevcodeのOpenSTAManagerにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2026-38751 2026-06-3 17:02 2026-05-4 Show GitHub Exploit DB Packet Storm
919 5.5 警告
Local
GPAC GPAC GPACにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-39103 2026-06-3 17:02 2026-05-5 Show GitHub Exploit DB Packet Storm
920 6.1 警告
Network
heartcombo devise heartcomboのdeviseにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-40295 2026-06-3 17:02 2026-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 7.8 HIGH
Local
- - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. New CWE-416
 Use After Free
CVE-2026-48583 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
82 7.9 HIGH
Local
- - Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-284
Improper Access Control
CVE-2026-48578 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
83 7.9 HIGH
Local
- - Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-1329
 Reliance on Component That is Not Updateable
CVE-2026-48576 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
84 7.9 HIGH
Local
- - Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-693
 Protection Mechanism Failure
CVE-2026-48575 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
85 7.8 HIGH
Local
- - Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. New CWE-122
Heap-based Buffer Overflow
CVE-2026-48574 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
86 7.9 HIGH
Local
- - Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-1329
 Reliance on Component That is Not Updateable
CVE-2026-48573 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
87 7.9 HIGH
Local
- - Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-693
 Protection Mechanism Failure
CVE-2026-48570 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
88 7.1 HIGH
Local
- - Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. New CWE-20
CWE-23
 Improper Input Validation 
 Relative Path Traversal
CVE-2026-48569 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
89 7.9 HIGH
Local
- - Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-693
 Protection Mechanism Failure
CVE-2026-48568 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm
90 5.5 MEDIUM
Local
- - Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. New CWE-125
Out-of-bounds Read
CVE-2026-48566 2026-06-10 02:17 2026-06-10 Show GitHub Exploit DB Packet Storm