Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
21 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 New CWE-617
到達可能なアサーション 		CVE-2026-37228 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
22 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 New CWE-617
到達可能なアサーション 		CVE-2026-37229 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
23 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-37230 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
24 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける整数アンダーフローの脆弱性 New CWE-191
整数アンダーフロー 		CVE-2026-37231 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
25 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 New CWE-617
到達可能なアサーション 		CVE-2026-37233 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
26 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-37235 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
27 4.9 警告
Network 		MacGregor Interschalt VDR G4e Firmware MacGregorのInterschalt VDR G4e Firmwareにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 New CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2026-40425 2026-06-5 10:51 2026-05-29 Show GitHub Exploit DB Packet Storm
28 7.5 重要
Network 		bitwiseshiftleft Stanford Javascript Crypto Library bitwiseshiftleftのStanford Javascript Crypto Libraryにおける複数の脆弱性 New CWE-325
CWE-347
CVE-2026-4258 2026-06-5 10:51 2026-03-17 Show GitHub Exploit DB Packet Storm
29 9.9 緊急
Network 		Linux Foundation CloudNativePG Linux FoundationのCloudNativePGにおける複数の脆弱性 New CWE-250
CWE-271
CWE-426
CVE-2026-44477 2026-06-5 10:51 2026-05-28 Show GitHub Exploit DB Packet Storm
30 9.6 緊急
Network 		John Pettitt (jpettitt) MeshCore Card John Pettitt (jpettitt)のMeshCore Cardにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45323 2026-06-5 10:51 2026-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 6.5 MEDIUM
Network 		- - Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: … New CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-11215 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
252 6.5 MEDIUM
Network 		- - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity:… New CWE-346
CWE-352
 Origin Validation Error
 Origin Validation Error 		CVE-2026-11214 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
253 9.6 CRITICAL
Network 		- - Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox … New CWE-20
 Improper Input Validation  		CVE-2026-11213 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
254 4.3 MEDIUM
Network 		- - Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted C… New CWE-284
Improper Access Control 		CVE-2026-11212 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
255 6.5 MEDIUM
Network 		- - Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. (Chromium security sever… New CWE-284
Improper Access Control 		CVE-2026-11210 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
256 6.5 MEDIUM
Network 		- - Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from p… New CWE-200
Information Exposure 		CVE-2026-11209 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
257 9.6 CRITICAL
Network 		- - Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromi… New CWE-20
 Improper Input Validation  		CVE-2026-11207 2026-06-6 00:16 2026-06-5 Show GitHub Exploit DB Packet Storm
258 5.5 MEDIUM
Local 		ni ni-pal Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability aff… New CWE-476
 NULL Pointer Dereference 		CVE-2026-8035 2026-06-6 00:11 2026-06-3 Show GitHub Exploit DB Packet Storm
259 7.8 HIGH
Local 		ni ni-pal Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and p… New CWE-1285
 Improper Validation of Specified Index, Position, or Offset in Input 		CVE-2026-8036 2026-06-6 00:10 2026-06-3 Show GitHub Exploit DB Packet Storm
260 - - - Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_shells` as the approved shell list that customers may assign to FTP users. However… New CWE-863
 Incorrect Authorization 		CVE-2026-41235 2026-06-6 00:09 2026-06-5 Show GitHub Exploit DB Packet Storm