Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2691	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-11677	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2692	5.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-11678	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2693	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11679	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2694	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11680	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2695	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11683	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2696	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-11684	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2697	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11685	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2698	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11686	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2699	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11687	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

2700	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-11688	2026-06-10 14:29	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
891	6.5	MEDIUM Network	-	-	Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable registration ID derived from IMEI. The enrollment system lacks additional authentication before assig…	CWE-340 Generation of Predictable Numbers or Identifiers	CVE-2026-9219	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

892	-		-	-	HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality. The function get_feed() in system/admin/admin.php passes user-supplied $feed_url directly…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-57940	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

893	7.7	HIGH Network	-	-	Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.	CWE-551	CVE-2026-57920	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

894	9.1	CRITICAL Network	-	-	The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.	CWE-22 Path Traversal	CVE-2026-56445	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

895	7.8	HIGH Local	vim	vim	Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iterative…	CWE-787 Out-of-bounds Write	CVE-2026-55693	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

896	7.3	HIGH Network	-	-	The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predi…	CWE-613 Insufficient Session Expiration	CVE-2026-54479	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

897	-		-	-	File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, a low-privileged authenticated user of filebr…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-54097	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

898	7.5	HIGH Network	-	-	The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks o…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2026-50176	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

899	6.5	MEDIUM Network	-	-	Charging station authentication identifiers are publicly accessible via web-based mapping platforms.	CWE-522 Insufficiently Protected Credentials	CVE-2026-44622	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm

900	9.4	CRITICAL Network	-	-	WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensiti…	CWE-306 Missing Authentication for Critical Function	CVE-2026-40702	2026-06-26 23:17	2026-06-26	Show	GitHub Exploit DB Packet Storm