Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2471	5.5	警告 Local	Google	Android	GoogleのAndroidにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-0079	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2472	6.5	警告 Network	Google	Android	GoogleのAndroidにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-0080	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2473	5.5	警告 Local	Google	Android	GoogleのAndroidにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-0085	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2474	6.8	警告 Local	Google	Android	GoogleのAndroidにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-0086	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2475	7.8	重要 Local	Google	Android	GoogleのAndroidにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-0087	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2476	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-0088	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2477	7.8	重要 Local	Google	Android	GoogleのAndroidにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-0089	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2478	7.8	重要 Local	Google	Android	GoogleのAndroidにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-0091	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2479	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-0093	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

2480	7.8	重要 Local	Google	Android	GoogleのAndroidにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-0094	2026-06-5 10:49	2026-06-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4081	5.3	MEDIUM Network	mermaid_project	mermaid	Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, there is a denial-of-service attack when rendering gantt charts, i…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-41150	2026-06-2 03:37	2026-05-30	Show	GitHub Exploit DB Packet Storm

4082	8.3	HIGH Network	openclaw	openclaw	OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that allows non-owner authorized chat senders to issue device-pairing bootstrap codes without…	CWE-862 Missing Authorization	CVE-2026-32905	2026-06-2 03:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

4083	5.4	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers can route admin comma…	CWE-863 Incorrect Authorization	CVE-2026-34507	2026-06-2 03:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

4084	4.8	MEDIUM Network	tp-link	tl-sg108pe_firmware	A stored cross-site scripting (XSS) vulnerability has been identified in the web management interface of TP-Link's TL-SG108PE v5 switch due to improper sanitation of the SYSNAM configuration paramete…	CWE-79 Cross-site Scripting	CVE-2026-34127	2026-06-2 03:35	2026-05-30	Show	GitHub Exploit DB Packet Storm

4085	9.9	CRITICAL Network	yhirose	cpp-httplib	cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, when cpp-httplib's server parses an incoming request, it applies percent-decoding to every header va…	CWE-93 CWE-444 CRLF Injection HTTP Request Smuggling	CVE-2026-45372	2026-06-2 03:34	2026-05-30	Show	GitHub Exploit DB Packet Storm

4086	8.2	HIGH Network	-	-	Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action's entrypoint.sh invoked DangerJS from the caller's workspac…	CWE-427 CWE-829 Uncontrolled Search Path Element Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-44358	2026-06-2 03:33	2026-05-29	Show	GitHub Exploit DB Packet Storm

4087	8.7	HIGH Network	-	-	Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in …	CWE-269 Improper Privilege Management	CVE-2026-44543	2026-06-2 03:33	2026-05-29	Show	GitHub Exploit DB Packet Storm

4088	7.4	HIGH Network	-	-	FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.12.0, /api/totp_setup.php is callable from a session that has only passed the passwo…	CWE-200 CWE-287 CWE-306 Information Exposure Improper Authentication Missing Authentication for Critical Function	CVE-2026-44460	2026-06-2 03:33	2026-05-28	Show	GitHub Exploit DB Packet Storm

4089	-		-	-	mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dyna…	CWE-94 Code Injection	CVE-2026-44672	2026-06-2 03:33	2026-05-29	Show	GitHub Exploit DB Packet Storm

4090	5.9	MEDIUM Network	github	enterprise_server	A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-8606	2026-06-2 03:33	2026-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed