Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1941	5.5	警告 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2012 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Wind…	Windows Hyper-V の情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2026-42972	2026-06-11 16:24	2026-06-9	Show	GitHub Exploit DB Packet Storm

1942	5.5	警告 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Windows Server 2016 Microsoft Wind…	Windows プッシュ通知の情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2026-42973	2026-06-11 16:24	2026-06-9	Show	GitHub Exploit DB Packet Storm

1943	8.1	重要 Network	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows Server 2022 Microsoft Windows 11 23h2 Microsoft Wind…	Windows パフォーマンスモニターのリモートコード実行に対する脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-42974	2026-06-11 16:24	2026-06-9	Show	GitHub Exploit DB Packet Storm

1944	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Windows 10 1809 Microsoft Windows&…	Windows プッシュ通知の特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-42977	2026-06-11 16:24	2026-06-9	Show	GitHub Exploit DB Packet Storm

1945	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Windows 10 1809 Microsoft Windows&…	Windows プッシュ通知の特権昇格の脆弱性	CWE-362 CWE-416	CVE-2026-42978	2026-06-11 16:24	2026-06-9	Show	GitHub Exploit DB Packet Storm

1946	7	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Windows 10 1809 Microsoft Windows&…	Windows カーネルの特権の昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-42984	2026-06-11 16:24	2026-06-9	Show	GitHub Exploit DB Packet Storm

1947	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45453	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

1948	8.8	重要 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint のリモートコードが実行される脆弱性	CWE-22 パス・トラバーサル	CVE-2026-45454	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

1949	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45462	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

1950	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45464	2026-06-11 16:23	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4231	-		-	-	The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. An attacker with JavaScript execution in the render…	CWE-749 Exposed Dangerous Method or Function	CVE-2026-47899	2026-06-9 23:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

4232	-		-	-	Logseq is vulnerable to a stored cross-site scripting (XSS). A malicious plugin can include a JavaScript payload in the "name" field of its "package.json" file, which is rendered using "innerHTML" wi…	CWE-79 Cross-site Scripting	CVE-2026-47900	2026-06-9 23:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

4233	-		-	-	Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attributes, such as event handlers, into their container element in the host DOM. Du…	CWE-79 Cross-site Scripting	CVE-2026-47901	2026-06-9 23:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

4234	-		-	-	Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who controls a version string to cause a denial of service through CPU and memory ex…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-49762	2026-06-9 23:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

4235	9.8	CRITICAL Network	-	-	Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software Inc. E-İmar allows SQL Injection. This issue affects E-İmar: from 2.10.1.0 befor…	CWE-89 SQL Injection	CVE-2026-7486	2026-06-9 23:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

4236	-		-	-	Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name (e.g. `git`, `pandoc`, `grep`), the argument string is concaten…	CWE-78 OS Command	CVE-2026-9279	2026-06-9 23:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

4237	8.8	HIGH Network	google	chrome	Use after free in File Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)	CWE-416 Use After Free	CVE-2026-11630	2026-06-9 23:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

4238	8.3	HIGH Network	google	chrome	Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTM…	CWE-416 Use After Free	CVE-2026-11631	2026-06-9 23:45	2026-06-9	Show	GitHub Exploit DB Packet Storm

4239	3.3	LOW Network	-	-	A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string() function in auditlog.c copies a fixed-length password mask into a precis…	CWE-122 Heap-based Buffer Overflow	CVE-2026-11792	2026-06-9 23:42	2026-06-9	Show	GitHub Exploit DB Packet Storm

4240	9.6	CRITICAL Network	google	chrome	Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)	CWE-416 Use After Free	CVE-2026-11165	2026-06-9 23:24	2026-06-5	Show	GitHub Exploit DB Packet Storm