Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5131	8.8	重要 Network	langflow	langflow Langflow-base	langflowのLangflow-base等の複数製品における複数の脆弱性	CWE-639 CWE-862	CVE-2026-34046	2026-05-12 10:19	2026-03-27	Show	GitHub Exploit DB Packet Storm

5132	7.5	重要 Network	Gazelle project	Gazelle	KazeburoのGazelleにおけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-40562	2026-05-12 10:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

5133	5.3	警告 Network	opentelemetry	OpenTelemetry.Exporter.Zipkin	opentelemetryのOpenTelemetry.Exporter.Zipkinにおける複数の脆弱性	CWE-400 CWE-770	CVE-2026-41310	2026-05-12 10:19	2026-05-6	Show	GitHub Exploit DB Packet Storm

5134	7.5	重要 Network	uuidjs	uuid	uuidjsのuuidにおける複数の脆弱性	CWE-787 CWE-823	CVE-2026-41907	2026-05-12 10:19	2026-04-24	Show	GitHub Exploit DB Packet Storm

5135	7.5	重要 Network	Amazon.com, Inc.	Bedrock Agentcore Starter Toolkit	Amazon.com, Inc.のBedrock Agentcore Starter Toolkitにおける複数の脆弱性	CWE-283 CWE-340	CVE-2026-4269	2026-05-12 10:19	2026-03-16	Show	GitHub Exploit DB Packet Storm

5136	7.5	重要 Network	VEGA	VEGAPULS 6X Firmware	VEGAのVEGAPULS 6X Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-3323	2026-05-12 10:19	2026-04-28	Show	GitHub Exploit DB Packet Storm

5137	3.3	低 Local	ちとらソフト	Lhaz+ Lhaz	LhazおよびLhaz+におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41530	2026-05-11 17:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

5138	-	-	Apache Software Foundation	Apache HTTP Server	Apache HTTP Server 2.4における複数の脆弱性に対するアップデート（2026年5月）	-	CVE-2026-23918 CVE-2026-24072 CVE-2026-28780 CVE-2026-29168 CVE-2026-29169 CVE-2026-33006 CVE-2026-33007 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-34059	2026-05-11 16:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

5139	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月07日）	-	-	2026-05-11 16:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

5140	7.2	重要 Network	株式会社GROWI	GROWI	GROWIにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41951	2026-05-11 15:29	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2821	5.5	MEDIUM Local	samsung	android	Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.	NVD-CWE-Other	CVE-2026-21025	2026-06-6 11:01	2026-06-5	Show	GitHub Exploit DB Packet Storm

2822	5.5	MEDIUM Local	samsung	android	Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.	NVD-CWE-Other	CVE-2026-21026	2026-06-6 11:00	2026-06-5	Show	GitHub Exploit DB Packet Storm

2823	3.3	LOW Local	samsung	android	Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.	NVD-CWE-Other	CVE-2026-21027	2026-06-6 11:00	2026-06-5	Show	GitHub Exploit DB Packet Storm

2824	5.5	MEDIUM Local	samsung	android	Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.	NVD-CWE-noinfo	CVE-2026-21028	2026-06-6 11:00	2026-06-5	Show	GitHub Exploit DB Packet Storm

2825	7.8	HIGH Local	samsung	android	Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.	NVD-CWE-Other	CVE-2026-21029	2026-06-6 11:00	2026-06-5	Show	GitHub Exploit DB Packet Storm

2826	7.8	HIGH Local	samsung	android	Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.	NVD-CWE-noinfo	CVE-2026-21030	2026-06-6 11:00	2026-06-5	Show	GitHub Exploit DB Packet Storm

2827	7.8	HIGH Local	samsung	android	Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.	CWE-863 Incorrect Authorization	CVE-2026-21031	2026-06-6 10:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

2828	6.5	MEDIUM Network	google	chrome	Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity:…	CWE-284 Improper Access Control	CVE-2026-11204	2026-06-6 10:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

2829	6.5	MEDIUM Network	google	chrome	Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medi…	CWE-693 Protection Mechanism Failure	CVE-2026-11206	2026-06-6 10:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

2830	9.6	CRITICAL Network	google	chrome	Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromi…	CWE-20 Improper Input Validation	CVE-2026-11207	2026-06-6 10:59	2026-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed