Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
361 5.4 警告
Network
Synology Inc. Contacts Synology Inc.のContactsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-13167 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
362 5.5 警告
Local
Libusb Libusb Libusbにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-23679 2026-06-3 15:38 2026-05-27 Show GitHub Exploit DB Packet Storm
363 7.8 重要
Local
MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2026-25104 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
364 7.8 重要
Local
MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-25713 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
365 5.3 警告
Network
Espen Hovlandsdal (rexxars) eventsource-encoder Espen Hovlandsdal (rexxars)のeventsource-encoderにおける複数の脆弱性 CWE-113
CWE-93
CVE-2026-44214 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
366 6.1 警告
Network
Nitro Nitro Nitroにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-44372 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
367 5.3 警告
Network
Nitro Nitro Nitroにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-44373 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
368 7.5 重要
Network
Lookyloo Playwright Capture LookylooのPlaywright Captureにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44439 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
369 7.8 重要
Local
GitoxideLabs gix-fs GitoxideLabsのgix-fsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-44471 2026-06-3 15:38 2026-05-13 Show GitHub Exploit DB Packet Storm
370 9.9 緊急
Network
Vowpal Wabbit Vowpal Wabbit Vowpal Wabbitにおける複数の脆弱性 CWE-1336
CWE-78
CVE-2026-44723 2026-06-3 15:38 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2141 8.8 HIGH
Network
- - A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. The manipulation of the argument Sh… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-10164 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2142 8.8 HIGH
Network
- - A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manip… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10165 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2143 8.8 HIGH
Network
- - A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the file /goform/formSetPassword. Executing a manipulation of the argument webpage can… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-10162 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2144 6.3 MEDIUM
Network
- - A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of t… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-10166 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2145 5.3 MEDIUM
Network
- - The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the plugin not properly verifying that a user … CWE-862
 Missing Authorization
CVE-2026-8382 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2146 7.3 HIGH
Network
- - A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. This impacts the function sign_auth_cookie of the file appl… CWE-287
Improper Authentication
CVE-2026-10167 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2147 6.3 MEDIUM
Network
- - A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected is the function marks of the file appl… CWE-99
Resource Injection
CVE-2026-10168 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2148 3.7 LOW
Network
- - A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected by this vulnerability is the function ajax_forgot_pa… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-10169 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2149 6.3 MEDIUM
Network
- - A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /vms/php/phone_0.php. This manipulation of the argument phone ca… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10170 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm
2150 4.7 MEDIUM
Network
- - A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. Such manipulation of the argument ID leads to … CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10171 2026-06-2 00:15 2026-05-31 Show GitHub Exploit DB Packet Storm