Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 7.5 重要
Network 		rurban cpanel::json::xs Reini UrbanのCpanel::JSON::XSにおける複数の脆弱性 New CWE-755
CWE-763
CVE-2026-9516 2026-06-8 12:30 2026-06-3 Show GitHub Exploit DB Packet Storm
202 5.5 警告
Local 		Grzegorz Kostka (gkostka) Lwext4 Grzegorz Kostka (gkostka)のLwext4におけるゼロ除算に関する脆弱性 New CWE-369
ゼロ除算 		CVE-2025-70100 2026-06-8 12:29 2026-06-3 Show GitHub Exploit DB Packet Storm
203 6.5 警告
Network 		Grzegorz Kostka (gkostka) Lwext4 Grzegorz Kostka (gkostka)のLwext4における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2025-70101 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
204 7.5 重要
Network 		NAVTOR AS NavBox Firmware NAVTOR ASのNavBox Firmwareにおける絶対パストラバーサルに関する脆弱性 New CWE-36
絶対パストラバーサル 		CVE-2026-2753 2026-06-8 12:28 2026-03-6 Show GitHub Exploit DB Packet Storm
205 7.5 重要
Network 		NAVTOR AS NavBox Firmware NAVTOR ASのNavBox Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-2754 2026-06-8 12:28 2026-03-6 Show GitHub Exploit DB Packet Storm
206 6.5 警告
Network 		Project Calico Calico tigeraのCalicoにおけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
ログファイルからの情報漏えい 		CVE-2026-41184 2026-06-8 12:28 2026-05-28 Show GitHub Exploit DB Packet Storm
207 6.5 警告
Network 		Project Calico Calico tigeraのCalicoにおけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
ログファイルからの情報漏えい 		CVE-2026-41185 2026-06-8 12:28 2026-05-28 Show GitHub Exploit DB Packet Storm
208 5.5 警告
Local 		Canonical Livepatch Client CanonicalのLivepatch Clientにおける複数の脆弱性 New CWE-306
CWE-732
CVE-2026-6369 2026-06-8 12:28 2026-04-20 Show GitHub Exploit DB Packet Storm
209 7.8 重要
Local 		Synology Inc. Hyper Backup Explorer Synology Inc.のHyper Backup Explorerにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 New CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2022-49042 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
210 5.9 警告
Network 		Synology Inc. Note Station Client Synology Inc.のNote Station Clientにおける重要な情報の平文での送信に関する脆弱性 New CWE-319
重要な情報の平文での送信 		CVE-2023-52951 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1331 7.5 HIGH
Network 		- - The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and including, 4.71. Thi… CWE-862
 Missing Authorization 		CVE-2026-10737 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
1332 6.5 MEDIUM
Network 		- - The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in all versions up to, and including, 4.8.20 due to insufficient escaping on the u… CWE-89
SQL Injection 		CVE-2026-8653 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
1333 7.6 HIGH
Network 		- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection. This issue affects Photo Gallery by 10W… CWE-89
SQL Injection 		CVE-2026-49771 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
1334 5.3 MEDIUM
Network 		- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-49077 2026-06-4 22:53 2026-06-4 Show GitHub Exploit DB Packet Storm
1335 8.8 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability all… CWE-269
 Improper Privilege Management 		CVE-2026-46837 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
1336 7.4 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability al… CWE-284
Improper Access Control 		CVE-2026-46818 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
1337 9.8 CRITICAL
Network 		oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allo… CWE-269
CWE-287
CWE-306
 Improper Privilege Management
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-46817 2026-06-4 22:45 2026-05-29 Show GitHub Exploit DB Packet Storm
1338 4.9 MEDIUM
Network 		progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text credentials used co… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-7313 2026-06-4 22:12 2026-06-2 Show GitHub Exploit DB Packet Storm
1339 7.5 HIGH
Network 		progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.844… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-7312 2026-06-4 22:09 2026-06-2 Show GitHub Exploit DB Packet Storm
1340 8.1 HIGH
Network 		progress sitefinity CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.… CWE-20
 Improper Input Validation  		CVE-2026-7195 2026-06-4 21:51 2026-06-2 Show GitHub Exploit DB Packet Storm