Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
31 2.7 低
Network 		GTranslate Inc. Gtranslate GTranslate Inc.のGtranslateにおける不変と仮定されるデータの変更に関する脆弱性 CWE-471
不変と仮定されるデータの変更 		CVE-2026-8492 2026-05-29 11:19 2026-05-19 Show GitHub Exploit DB Packet Storm
32 5.4 警告
Network 		Colorbox Inline Project Colorbox Inline Colorbox Inline ProjectのColorbox Inlineにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-8493 2026-05-29 11:19 2026-05-19 Show GitHub Exploit DB Packet Storm
33 9.8 緊急
Network 		Date iCal Project Date iCal Date iCal ProjectのDate iCalにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-8495 2026-05-29 11:19 2026-05-19 Show GitHub Exploit DB Packet Storm
34 7.5 重要
Network 		Archive::Tar project Archive::Tar Archive::Tar projectのArchive::Tarにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-9538 2026-05-29 11:19 2026-05-26 Show GitHub Exploit DB Packet Storm
35 9.8 緊急
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2018-25357 2026-05-29 11:19 2026-05-23 Show GitHub Exploit DB Packet Storm
36 6.1 警告
Network 		Moodle Moodle Moodleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2022-50943 2026-05-29 11:19 2026-05-10 Show GitHub Exploit DB Packet Storm
37 4.3 警告
Network 		WSO2 WSO2 Identity Server
Identity Server as Key Manager
WSO2 Open Banking IAM 		WSO2のWSO2 Identity Server等の複数製品におけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい 		CVE-2024-0391 2026-05-29 11:19 2026-05-11 Show GitHub Exploit DB Packet Storm
38 8.6 重要
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-10470 2026-05-29 11:19 2026-05-11 Show GitHub Exploit DB Packet Storm
39 7.3 重要
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-10908 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
40 5.5 警告
Local 		IBM IBM DB2 IBMのIBM DB2におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2025-13755 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 8.3 HIGH
Network 		google chrome Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security … Update CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-9889 2026-06-2 03:44 2026-05-29 Show GitHub Exploit DB Packet Storm
62 8.3 HIGH
Network 		google chrome Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via… Update CWE-269
 Improper Privilege Management 		CVE-2026-9892 2026-06-2 03:44 2026-05-29 Show GitHub Exploit DB Packet Storm
63 8.3 HIGH
Network 		google chrome Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb… Update CWE-20
 Improper Input Validation  		CVE-2026-9898 2026-06-2 03:44 2026-05-29 Show GitHub Exploit DB Packet Storm
64 5.0 MEDIUM
Network 		- - Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.10, the URL checking logic in local-deep-research has a logical flaw that could be bypassed by attac… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-46526 2026-06-2 03:43 2026-05-29 Show GitHub Exploit DB Packet Storm
65 7.8 HIGH
Local 		- - Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.0.9 to 1.17.0, the get_diagnostics MCP tool loads and executes all DiagnosticAn… Update CWE-94
Code Injection 		CVE-2026-45555 2026-06-2 03:43 2026-05-29 Show GitHub Exploit DB Packet Storm
66 8.6 HIGH
Network 		- - Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/batch.go) allows any p… Update CWE-409
CWE-770
 Improper Handling of Highly Compressed Data (Data Amplification)
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44697 2026-06-2 03:43 2026-05-30 Show GitHub Exploit DB Packet Storm
67 8.3 HIGH
Network 		google chrome Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr… Update CWE-416
 Use After Free 		CVE-2026-9905 2026-06-2 03:43 2026-05-29 Show GitHub Exploit DB Packet Storm
68 4.3 MEDIUM
Network 		google chrome Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) Update CWE-125
Out-of-bounds Read 		CVE-2026-9943 2026-06-2 03:43 2026-05-29 Show GitHub Exploit DB Packet Storm
69 8.8 HIGH
Network 		- - LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but… Update CWE-787
 Out-of-bounds Write 		CVE-2026-44988 2026-06-2 03:42 2026-05-28 Show GitHub Exploit DB Packet Storm
70 7.2 HIGH
Network 		- - mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45609 2026-06-2 03:42 2026-05-30 Show GitHub Exploit DB Packet Storm