Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1381 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-37233 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
1382 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-37235 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
1383 4.9 警告
Network 		MacGregor Interschalt VDR G4e Firmware MacGregorのInterschalt VDR G4e Firmwareにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2026-40425 2026-06-5 10:51 2026-05-29 Show GitHub Exploit DB Packet Storm
1384 7.5 重要
Network 		bitwiseshiftleft Stanford Javascript Crypto Library bitwiseshiftleftのStanford Javascript Crypto Libraryにおける複数の脆弱性 CWE-325
CWE-347
CVE-2026-4258 2026-06-5 10:51 2026-03-17 Show GitHub Exploit DB Packet Storm
1385 9.9 緊急
Network 		Linux Foundation CloudNativePG Linux FoundationのCloudNativePGにおける複数の脆弱性 CWE-250
CWE-271
CWE-426
CVE-2026-44477 2026-06-5 10:51 2026-05-28 Show GitHub Exploit DB Packet Storm
1386 9.6 緊急
Network 		John Pettitt (jpettitt) MeshCore Card John Pettitt (jpettitt)のMeshCore Cardにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45323 2026-06-5 10:51 2026-05-28 Show GitHub Exploit DB Packet Storm
1387 6.5 警告
Network 		Spring AI Community MCP Security Spring AI CommunityのMCP Securityにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-45609 2026-06-5 10:51 2026-05-29 Show GitHub Exploit DB Packet Storm
1388 5.5 警告
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-20
CWE-248
CVE-2026-45676 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
1389 7.5 重要
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-20
CWE-754
CVE-2026-45678 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
1390 6.5 警告
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-117
CWE-532
CVE-2026-45679 2026-06-5 10:51 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2761 9.8 CRITICAL
Network 		progress sitefinity CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in f… CWE-284
Improper Access Control 		CVE-2026-7198 2026-06-4 21:43 2026-06-2 Show GitHub Exploit DB Packet Storm
2762 8.8 HIGH
Network 		progress sitefinity CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote authenti… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-7201 2026-06-4 21:42 2026-06-2 Show GitHub Exploit DB Packet Storm
2763 5.4 MEDIUM
Network 		- - Wikidforum 2.20 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted HTML in the reply_text parameter. Attackers can pos… CWE-79
Cross-site Scripting 		CVE-2018-25384 2026-06-4 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
2764 9.0 CRITICAL
Network 		- - A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is config… CWE-78
OS Command  		CVE-2026-4408 2026-06-4 09:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2765 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-2596 2026-06-4 08:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2766 7.8 HIGH
Local 		google android In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges… NVD-CWE-noinfo
CWE-20
 Improper Input Validation  		CVE-2025-22424 2026-06-4 07:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2767 8.4 HIGH
Local 		- - Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog inter… CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2019-25718 2026-06-4 07:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2768 6.5 MEDIUM
Adjacent 		- - Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet… CWE-15
 External Control of System or Configuration Setting 		CVE-2019-25716 2026-06-4 07:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2769 9.1 CRITICAL
Network 		github cli GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attestation, gh release … CWE-863
 Incorrect Authorization 		CVE-2026-48501 2026-06-4 06:06 2026-05-30 Show GitHub Exploit DB Packet Storm
2770 4.9 MEDIUM
Network 		macgregor interschalt_vdr_g4e_firmware The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password. CWE-552
 Files or Directories Accessible to External Parties 		CVE-2026-40425 2026-06-4 05:54 2026-05-30 Show GitHub Exploit DB Packet Storm