Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3161 5.3 警告
Network
Fleet Device Management fleet Fleet Device Managementのfleetにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2026-24000 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3162 7.5 重要
Network
strapi strapi strapiにおける複数の脆弱性 CWE-200
CWE-22
CWE-943
CVE-2026-27886 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3163 6.5 警告
Network
Grafana Labs Grafana Grafana LabsのGrafanaにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-28376 2026-05-18 12:07 2026-05-13 Show GitHub Exploit DB Packet Storm
3164 2.7
Network
GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-2900 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3165 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-3073 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3166 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-3074 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3167 5.8 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-3160 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3168 9.1 緊急
Network
マイクロソフト Azure SDK for Java Azure SDK for Java のセキュリティ機能のバイパスの脆弱性 CWE-287
CWE-347
CVE-2026-33117 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3169 9.9 緊急
Network
マイクロソフト Microsoft Dynamics 365 Customer Insights Microsoft Dynamics 365 Customer Insights の特権昇格の脆弱性 CWE-269
不適切な権限管理
CVE-2026-33821 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3170 6.5 警告
Adjacent
Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-34960 2026-05-18 12:06 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3161 7.8 HIGH
Local
qualcomm snapdragon_g1_gen_2_gaming_platform_firmware
ar8035_firmware
csra6620_firmware
csra6640_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6800_firmware
fas…
Memory Corruption when processing device identifier strings that exceed the expected maximum length. CWE-787
 Out-of-bounds Write
CVE-2025-59605 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
3162 7.8 HIGH
Local
qualcomm cologne_firmware
cq7790_firmware
cq8725s_firmware
cq8750m_firmware
fastconnect_6200_firmware
wsa8840_firmware
wsa8845_firmware
wsa8845h_firmware
wsa8850_firmware
wsa8850w_f…
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization. CWE-476
 NULL Pointer Dereference
CVE-2025-59606 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
3163 5.5 MEDIUM
Network
qualcomm 5g_fixed_wireless_access_platform_firmware
ar8035_firmware
csr8811_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
sxr2250p_firmware
wcd9340_firmware
wcd9370_firmwar…
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. CWE-126
 Buffer Over-read
CVE-2025-59609 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
3164 7.5 HIGH
Network
ultrajson_project ultrajson UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write operation raises an excepti… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2026-44660 2026-06-3 03:00 2026-05-28 Show GitHub Exploit DB Packet Storm
3165 7.8 HIGH
Local
cnighswonger claude-code-cache-fix claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code's hook stdin payload directl… CWE-78
CWE-94
OS Command 
Code Injection
CVE-2026-45136 2026-06-3 02:57 2026-05-28 Show GitHub Exploit DB Packet Storm
3166 7.8 HIGH
Local
- - A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admi… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-40619 2026-06-3 02:35 2026-06-3 Show GitHub Exploit DB Packet Storm
3167 3.1 LOW
Network
- - HCL iReflection Third party vulnerable and outdated components issue was detected in the web application - CVE-2024-42206 2026-06-3 02:35 2026-06-3 Show GitHub Exploit DB Packet Storm
3168 6.3 MEDIUM
Network
- - CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c. The as_path_match() function uses a fixed-s… CWE-121
Stack-based Buffer Overflow
CVE-2026-49943 2026-06-3 02:35 2026-06-3 Show GitHub Exploit DB Packet Storm
3169 7.4 HIGH
Adjacent
linuxfoundation volcano Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluste… CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-44247 2026-06-3 02:25 2026-05-28 Show GitHub Exploit DB Packet Storm
3170 7.3 HIGH
Network
- - A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a manipulation of the argume… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10606 2026-06-3 02:19 2026-06-3 Show GitHub Exploit DB Packet Storm