Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4571	9.8	緊急 Network	GeoVision	GV-VMS Firmware	GeoVisionのGV-VMS Firmwareにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-42370	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

4572	9.8	緊急 Network	Bitwarden	Bitwarden Command-line Interface	BitwardenのBitwarden Command-line Interfaceにおける複数の脆弱性	CWE-78 CWE-94	CVE-2026-42994	2026-05-7 11:31	2026-05-1	Show	GitHub Exploit DB Packet Storm

4573	9.3	緊急 Network	GeoVision	GV-IP Device Utility	GeoVisionのGV-IP Device Utilityにおける隠蔽によるセキュリティへの依存に関する脆弱性	CWE-656 隠蔽によるセキュリティへの依存	CVE-2026-7161	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

4574	6.1	警告 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-7371	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

4575	9	緊急 Network	GeoVision	GV-VMS Firmware	GeoVisionのGV-VMS Firmwareにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-7372	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

4576	7.8	重要 Local	Zurich Instruments	LabOne Q	Zurich InstrumentsのLabOne Qにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-7584	2026-05-7 11:31	2026-05-1	Show	GitHub Exploit DB Packet Storm

4577	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	W308R Firmware	Shenzhen Tenda Technology Co.,Ltd.のW308R Firmwareにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25316	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

4578	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	W3002R Firmware A302 Firmware W309R Firmware	Shenzhen Tenda Technology Co.,Ltd.のA302 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25317	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

4579	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	FH303 Firmware A300 Firmware	Shenzhen Tenda Technology Co.,Ltd.のA300 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25318	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

4580	9.8	緊急 Network	DeanWu (pylixm)	Django-mdeditor	DeanWu (pylixm)のDjango-mdeditorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-13030	2026-05-7 11:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1981	7.5	HIGH Network	aiohttp	aiohttp	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, cookies set with the `cookies` parameter on requests are sent after following a cross-origin r…	CWE-346 Origin Validation Error	CVE-2026-47265	2026-06-5 22:39	2026-06-3	Show	GitHub Exploit DB Packet Storm

1982	7.8	HIGH Local	-	-	A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroy…	CWE-416 Use After Free	CVE-2026-50260	2026-06-5 22:27	2026-06-5	Show	GitHub Exploit DB Packet Storm

1983	7.8	HIGH Local	-	-	A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via …	CWE-416 Use After Free	CVE-2026-50261	2026-06-5 22:27	2026-06-5	Show	GitHub Exploit DB Packet Storm

1984	5.5	MEDIUM Local	-	-	An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number of bytes, exceeding …	CWE-125 Out-of-bounds Read	CVE-2026-50262	2026-06-5 22:27	2026-06-5	Show	GitHub Exploit DB Packet Storm

1985	5.5	MEDIUM Local	-	-	A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, le…	CWE-416 Use After Free	CVE-2026-50263	2026-06-5 22:27	2026-06-5	Show	GitHub Exploit DB Packet Storm

1986	7.8	HIGH Local	-	-	An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFro…	CWE-787 Out-of-bounds Write	CVE-2026-50264	2026-06-5 22:27	2026-06-5	Show	GitHub Exploit DB Packet Storm

1987	3.3	LOW Local	-	-	A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler. Performing a mani…	CWE-404 CWE-407 Improper Resource Shutdown or Release Inefficient Algorithmic Complexity	CVE-2026-11312	2026-06-5 22:27	2026-06-5	Show	GitHub Exploit DB Packet Storm

1988	3.6	LOW Local	-	-	A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of…	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2026-11329	2026-06-5 22:26	2026-06-5	Show	GitHub Exploit DB Packet Storm

1989	7.2	HIGH Network	-	-	A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulation of the argument ipv…	CWE-77 CWE-78 Command Injection OS Command	CVE-2026-10871	2026-06-5 22:26	2026-06-5	Show	GitHub Exploit DB Packet Storm

1990	7.2	HIGH Network	-	-	A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command inj…	CWE-77 CWE-78 Command Injection OS Command	CVE-2026-10872	2026-06-5 22:26	2026-06-5	Show	GitHub Exploit DB Packet Storm