Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1591 7.3 重要
Network 		Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33462 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
1592 5.3 警告
Network 		Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける有効期限後または解放後のリソースの操作に関する脆弱性 CWE-672
有効期限後または解放後のリソースの操作 		CVE-2026-33463 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
1593 6.5 警告
Network 		Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-33464 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
1594 9.8 緊急
Network 		オラクル Oracle Hospitality OPERA 5 Property Services オラクルのOracle Hospitality OPERA 5 Property Servicesにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-34311 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
1595 9.8 緊急
Network 		IBM Engineering Lifecycle Management IBMのEngineering Lifecycle Managementにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-3660 2026-06-3 17:02 2026-05-26 Show GitHub Exploit DB Packet Storm
1596 7.5 重要
Network 		FRRouting Project FRRouting FRRouting ProjectのFRRoutingにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-37457 2026-06-3 17:02 2026-05-1 Show GitHub Exploit DB Packet Storm
1597 7.2 重要
Network 		devcode openstamanager DevcodeのOpenSTAManagerにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-38751 2026-06-3 17:02 2026-05-4 Show GitHub Exploit DB Packet Storm
1598 5.5 警告
Local 		GPAC GPAC GPACにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-39103 2026-06-3 17:02 2026-05-5 Show GitHub Exploit DB Packet Storm
1599 6.1 警告
Network 		heartcombo devise heartcomboのdeviseにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-40295 2026-06-3 17:02 2026-05-22 Show GitHub Exploit DB Packet Storm
1600 5.5 警告
Local 		BentoML BentoML BentoMLにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-40610 2026-06-3 17:02 2026-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2611 4.7 MEDIUM
Local 		linaro op-tee OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of t… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-45614 2026-06-5 09:20 2026-06-4 Show GitHub Exploit DB Packet Storm
2612 9.8 CRITICAL
Network 		acer predator_connect_w6x_firmware Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device. CWE-77
Command Injection 		CVE-2026-49199 2026-06-5 04:44 2026-05-29 Show GitHub Exploit DB Packet Storm
2613 9.6 CRITICAL
Network 		huggingface transformers A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-5241 2026-06-5 03:54 2026-06-3 Show GitHub Exploit DB Packet Storm
2614 6.5 MEDIUM
Network 		koha koha Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-26379 2026-06-5 03:54 2026-06-4 Show GitHub Exploit DB Packet Storm
2615 8.1 HIGH
Network 		shopify react-router React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through extern… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-42211 2026-06-5 03:50 2026-06-3 Show GitHub Exploit DB Packet Storm
2616 5.4 MEDIUM
Network 		koha koha Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice features CWE-79
Cross-site Scripting 		CVE-2026-26378 2026-06-5 03:49 2026-06-4 Show GitHub Exploit DB Packet Storm
2617 6.1 MEDIUM
Network 		shopify react-router React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an external domain due to p… CWE-601
Open Redirect 		CVE-2026-40181 2026-06-5 03:46 2026-06-3 Show GitHub Exploit DB Packet Storm
2618 7.5 HIGH
Network 		shopify
turbo-stream 		react-router
turbo_stream 		React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-34077 2026-06-5 03:45 2026-06-3 Show GitHub Exploit DB Packet Storm
2619 4.7 MEDIUM
Network 		shopify react-router React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS… CWE-79
Cross-site Scripting 		CVE-2026-33245 2026-06-5 03:43 2026-06-3 Show GitHub Exploit DB Packet Storm
2620 7.3 HIGH
Network 		securly securly Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data. CWE-798
 Use of Hard-coded Credentials 		CVE-2026-8876 2026-06-5 03:42 2026-06-4 Show GitHub Exploit DB Packet Storm