Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
271	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-10959	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

272	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける初期化されていない変数の使用に関する脆弱性 New	CWE-457 初期化されていない変数の使用	CVE-2026-10960	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

273	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-10961	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

274	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける型の取り違えに関する脆弱性 New	CWE-843 型の取り違え	CVE-2026-10962	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

275	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 New	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-10963	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

276	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 New	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-10964	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

277	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 New	CWE-472 不変と仮定される Web パラメータの外部制御	CVE-2026-10965	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

278	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-10966	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

279	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-10967	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

280	7.4	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-10968	2026-06-8 12:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1601	-		-	-	In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerabili…	CWE-95 Eval Injection	CVE-2026-8914	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1602	6.5	MEDIUM Network	-	-	Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or directories outside the d…	CWE-59 Link Following	CVE-2026-11322	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1603	5.4	MEDIUM Network	-	-	In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.	CWE-79 Cross-site Scripting	CVE-2026-50591	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1604	6.4	MEDIUM Network	-	-	In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view).	CWE-79 Cross-site Scripting	CVE-2026-50592	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1605	6.1	MEDIUM Network	-	-	Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code throug…	CWE-79 Cross-site Scripting	CVE-2026-50230	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1606	7.2	HIGH Network	-	-	Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerability in the log viewer that allows attackers to inject malicious scripts by exploiting unescaped template va…	CWE-79 Cross-site Scripting	CVE-2026-50231	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1607	3.6	LOW Local	-	-	A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the c…	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2026-11330	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1608	5.3	MEDIUM Network	-	-	Lyrion Music Server 9.2.0 contains an arbitrary directory listing vulnerability in its readdirectory query, exposed through both the CLI service (TCP port 9090) and the HTTP JSON-RPC endpoint (/jsonr…	CWE-548 Exposure of Information Through Directory Listing	CVE-2026-50233	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1609	6.1	MEDIUM Network	-	-	Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attacke…	CWE-79 Cross-site Scripting	CVE-2026-50235	2026-06-5 23:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

1610	2.7	LOW Network	-	-	A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This…	CWE-1220 Insufficient Granularity of Access Control	CVE-2026-9088	2026-06-5 23:56	2026-06-5	Show	GitHub Exploit DB Packet Storm