Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1161	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-8971	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

1162	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-8972	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

1163	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8973	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

1164	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8974	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

1165	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8975	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

1166	3.3	低 Local	Siber Systems Inc.	RoboForm Password Manager	Androidアプリ「パスワード管理ロボフォーム」のintent処理における検証不備の脆弱性	CWE-357 危険な操作に対する不十分な警告	CVE-2026-47782	2026-05-21 16:37	2026-05-20	Show	GitHub Exploit DB Packet Storm

1167	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月19日）	-	-	2026-05-21 16:17	2026-05-20	Show	GitHub Exploit DB Packet Storm

1168	6.1	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-24710	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

1169	5.3	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24711	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

1170	7.3	重要 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-24712	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2481	8.3	HIGH Network	google	chrome	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (C…	CWE-416 Use After Free	CVE-2026-9946	2026-05-30 01:29	2026-05-29	Show	GitHub Exploit DB Packet Storm

2482	-		-	-	Group-Office is an enterprise customer relationship management and groupware tool. Prior to 26.0.25, 25.0.100, and 6.8.165, GroupOffice allows authenticated users to persist arbitrary legacy settings…	CWE-79 CWE-639 Cross-site Scripting Authorization Bypass Through User-Controlled Key	CVE-2026-45551	2026-05-30 01:29	2026-05-29	Show	GitHub Exploit DB Packet Storm

2483	8.7	HIGH Network	-	-	HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a stored cross-site scripting (XSS) vulnerability in the `/system/api/saveNode…	CWE-79 Cross-site Scripting	CVE-2026-48527	2026-05-30 01:29	2026-05-29	Show	GitHub Exploit DB Packet Storm

2484	9.8	CRITICAL Network	-	-	manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deserialization of untrusted pickle data in the share.py module, where the /execute/{…	CWE-502 Deserialization of Untrusted Data	CVE-2026-10042	2026-05-30 01:29	2026-05-30	Show	GitHub Exploit DB Packet Storm

2485	8.2	HIGH Network	-	-	Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter. Attackers can send crafted …	CWE-89 SQL Injection	CVE-2018-25382	2026-05-30 01:29	2026-05-30	Show	GitHub Exploit DB Packet Storm

2486	8.4	HIGH Local	-	-	Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation.…	CWE-121 Stack-based Buffer Overflow	CVE-2018-25383	2026-05-30 01:29	2026-05-30	Show	GitHub Exploit DB Packet Storm

2487	8.2	HIGH Network	-	-	E-Registrasi Pencak Silat 18.10 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id_partai parame…	CWE-89 SQL Injection	CVE-2018-25385	2026-05-30 01:29	2026-05-30	Show	GitHub Exploit DB Packet Storm

2488	8.2	HIGH Network	-	-	HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries by injecting SQL code through the 'id' parameter. An unauthenticate…	CWE-89 SQL Injection	CVE-2018-25386	2026-05-30 01:29	2026-05-30	Show	GitHub Exploit DB Packet Storm

2489	5.3	MEDIUM Network	-	-	HaPe PKH 1.1 contains a cross-site request forgery vulnerability that allows attackers to change administrator passwords by submitting forged requests to the user update endpoint. Attackers can craft…	CWE-352 Origin Validation Error	CVE-2018-25387	2026-05-30 01:29	2026-05-30	Show	GitHub Exploit DB Packet Storm

2490	8.8	HIGH Network	-	-	HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by bypassing file type validation. Attackers can upload PHP files through mu…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-25388	2026-05-30 01:29	2026-05-30	Show	GitHub Exploit DB Packet Storm