Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5101	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-28959	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5102	4.6	警告 Physics	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性	CWE-359 認可されていないアクターへの個人情報の漏えい	CVE-2026-28963	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5103	4.9	警告 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28967	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5104	4.3	警告 Network	アップル	visionos iOS iPadOS	アップルのiPadOS等の複数製品におけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-28971	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5105	6.5	警告 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-28972	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5106	7.5	重要 Network		-	アップルのmacOSにおける複数の脆弱性	CWE-200 CWE-269	CVE-2026-28976	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5107	8.8	重要 Local		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28978	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5108	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-28983	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5109	6.2	警告 Local	アップル	tvOS iOS iPadOS	アップルのiPadOS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-28985	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

5110	5.5	警告 Local	アップル	visionos iOS iPadOS watchOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28988	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3321	7.8	HIGH Local	nsa	ghidra	Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with travers…	CWE-22 Path Traversal	CVE-2026-52752	2026-06-12 04:52	2026-06-10	Show	GitHub Exploit DB Packet Storm

3322	8.8	HIGH Network	nsa	ghidra	Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a maliciou…	CWE-502 Deserialization of Untrusted Data	CVE-2026-52751	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

3323	5.3	MEDIUM Network	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Windows Kerberos Denial of Service Vulnerability	CWE-125 Out-of-bounds Read	CVE-2026-42914	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

3324	7.8	HIGH Local	nsa	ghidra	Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands und…	CWE-88 Argument Injection	CVE-2026-52750	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

3325	8.8	HIGH Network	nsa	ghidra	Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE …	CWE-89 SQL Injection	CVE-2026-49498	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

3326	3.3	LOW Local	nsa	ghidra	Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attacke…	CWE-22 Path Traversal	CVE-2026-49497	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

3327	6.1	MEDIUM Local	nsa	ghidra	Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vecto…	CWE-416 Use After Free	CVE-2026-49496	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

3328	5.5	MEDIUM Local	nsa	ghidra	Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O b…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-49495	2026-06-12 04:49	2026-06-10	Show	GitHub Exploit DB Packet Storm

3329	7.0	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	CWE-362 Race Condition	CVE-2026-42912	2026-06-12 04:47	2026-06-10	Show	GitHub Exploit DB Packet Storm

3330	7.0	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	CWE-416 Use After Free	CVE-2026-42911	2026-06-12 04:47	2026-06-10	Show	GitHub Exploit DB Packet Storm