Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4571 9.6 緊急
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-5845 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
4572 8.9 重要
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-5921 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
4573 7.8 重要
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-6384 2026-04-30 10:57 2026-04-15 Show GitHub Exploit DB Packet Storm
4574 7.8 重要
Local 		Rapid7 Insight Agent Rapid7のInsight Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-6482 2026-04-30 10:57 2026-04-17 Show GitHub Exploit DB Packet Storm
4575 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6785 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
4576 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6786 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
4577 7.8 重要
Local 		IObit Malware Fighter IObitのMalware Fighterにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2016-20059 2026-04-28 10:14 2026-04-4 Show GitHub Exploit DB Packet Storm
4578 6.3 警告
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-62233 2026-04-28 10:14 2026-04-24 Show GitHub Exploit DB Packet Storm
4579 2.9 低
Local 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-22007 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4580 5.3 警告
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-22013 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
991 9.6 CRITICAL
Network 		google chrome Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Update CWE-787
 Out-of-bounds Write 		CVE-2026-9967 2026-06-2 02:22 2026-05-29 Show GitHub Exploit DB Packet Storm
992 8.3 HIGH
Network 		google chrome Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… Update CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-9975 2026-06-2 02:21 2026-05-29 Show GitHub Exploit DB Packet Storm
993 5.0 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted … Update CWE-20
 Improper Input Validation  		CVE-2026-9979 2026-06-2 02:21 2026-05-29 Show GitHub Exploit DB Packet Storm
994 6.2 MEDIUM
Local 		- - Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters. Text::LineFold splits the input string by specific line break characters (such… Update CWE-405
CWE-407
 Asymmetric Resource Consumption (Amplification)
 Inefficient Algorithmic Complexity 		CVE-2026-8594 2026-06-2 02:17 2026-05-31 Show GitHub Exploit DB Packet Storm
995 - - - StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric key material, in cleartext in a… Update CWE-312
CWE-522
 Cleartext Storage of Sensitive Information
 Insufficiently Protected Credentials 		CVE-2026-4387 2026-06-2 02:17 2026-05-30 Show GitHub Exploit DB Packet Storm
996 4.3 MEDIUM
Network 		- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, FreeScout allows a non-admin user to permanently delete an internal note (private thread) from any… Update CWE-862
 Missing Authorization 		CVE-2026-48811 2026-06-2 02:17 2026-05-30 Show GitHub Exploit DB Packet Storm
997 - - - iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state ins… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46385 2026-06-2 02:17 2026-05-30 Show GitHub Exploit DB Packet Storm
998 8.8 HIGH
Adjacent 		- - In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator pointers in BAT IV BAT IV keeps the last-hop neighbor address in each neigh_node, but… Update - CVE-2026-46238 2026-06-2 02:17 2026-05-28 Show GitHub Exploit DB Packet Storm
999 7.1 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Avoid overflow on msg bound check As pointed out by SDL, the previous condition may be vulnerable to overflow. … Update - CVE-2026-46237 2026-06-2 02:17 2026-05-28 Show GitHub Exploit DB Packet Storm
1000 - - - In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of the device structure because that violates th… Update - CVE-2026-46236 2026-06-2 02:17 2026-05-28 Show GitHub Exploit DB Packet Storm