Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5281 8.8 重要
Network 		レッドハット Red Hat Enterprise Linux AI
InstructLab 		レッドハットのRed Hat Enterprise Linux AI等の複数製品における信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-6859 2026-05-8 12:09 2026-04-22 Show GitHub Exploit DB Packet Storm
5282 6.5 警告
Network 		Amazon.com, Inc. tuftool
Amazon tough 		Amazon.com, Inc.のAmazon tough等の複数製品におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-6966 2026-05-8 12:09 2026-04-24 Show GitHub Exploit DB Packet Storm
5283 6.5 警告
Network 		Amazon.com, Inc. tuftool
Amazon tough 		Amazon.com, Inc.のAmazon tough等の複数製品におけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-6967 2026-05-8 12:09 2026-04-24 Show GitHub Exploit DB Packet Storm
5284 6.5 警告
Network 		Amazon.com, Inc. tuftool
Amazon tough 		Amazon.com, Inc.のAmazon tough等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-6968 2026-05-8 12:09 2026-04-24 Show GitHub Exploit DB Packet Storm
5285 7.5 重要
Network 		RRWO (Robert Rothenberg) Text::Minify::XS RRWO (Robert Rothenberg)のText::Minify::XSにおける複数の脆弱性 CWE-122
CWE-176
CVE-2026-7040 2026-05-8 12:09 2026-04-27 Show GitHub Exploit DB Packet Storm
5286 8.4 重要
Local 		HMBRAND (H.Merijn Brand) Text::CSV_XS HMBRAND (H.Merijn Brand)のText::CSV_XSにおける複数の脆弱性 CWE-416
CWE-825
CVE-2026-7111 2026-05-8 12:09 2026-04-29 Show GitHub Exploit DB Packet Storm
5287 9.1 緊急
Network 		MIYAGAWA (Tatsuhiko Miyagawa) Plack::Middleware::Xsendfile MIYAGAWA (Tatsuhiko Miyagawa)のPlack::Middleware::Xsendfileにおける複数の脆弱性 CWE-200
CWE-441
CWE-913
CVE-2026-7381 2026-05-8 12:09 2026-04-29 Show GitHub Exploit DB Packet Storm
5288 8.1 重要
Network 		D-Link Systems, Inc. M60 Firmware D-Link CorporationのM60 Firmwareにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2026-7554 2026-05-8 12:09 2026-05-1 Show GitHub Exploit DB Packet Storm
5289 9.8 緊急
Network 		WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7690 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
5290 6.3 警告
Network 		WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7691 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2491 6.5 MEDIUM
Network 		rrwo net\ Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This… CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-49940 2026-06-9 01:35 2026-06-5 Show GitHub Exploit DB Packet Storm
2492 7.5 HIGH
Network 		sanbeg etsy\ Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj… CWE-93
CRLF Injection 		CVE-2026-46741 2026-06-9 01:33 2026-06-5 Show GitHub Exploit DB Packet Storm
2493 6.5 MEDIUM
Network 		google chrome Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions v… CWE-20
CWE-602
 Improper Input Validation 
 Client-Side Enforcement of Server-Side Security 		CVE-2026-11287 2026-06-9 01:31 2026-06-5 Show GitHub Exploit DB Packet Storm
2494 5.3 MEDIUM
Network 		cosimo net\ Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional st… CWE-93
CRLF Injection 		CVE-2026-46739 2026-06-9 01:31 2026-06-5 Show GitHub Exploit DB Packet Storm
2495 7.5 HIGH
Network 		oalders html\ HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV retu… CWE-416
 Use After Free 		CVE-2026-8829 2026-06-9 01:29 2026-06-4 Show GitHub Exploit DB Packet Storm
2496 5.0 MEDIUM
Local 		google chrome Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. (Ch… CWE-472
CWE-190
 External Control of Assumed-Immutable Web Parameter
 Integer Overflow or Wraparound 		CVE-2026-11281 2026-06-9 01:27 2026-06-5 Show GitHub Exploit DB Packet Storm
2497 5.4 MEDIUM
Network 		- - IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customers that are not assi… CWE-863
 Incorrect Authorization 		CVE-2026-42547 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2498 4.7 MEDIUM
Network 		- - Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redir… CWE-602
 Client-Side Enforcement of Server-Side Security 		CVE-2026-42329 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2499 8.8 HIGH
Network 		- - Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. The provisioning cod… CWE-59
Link Following 		CVE-2026-41236 2026-06-9 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2500 7.3 HIGH
Network 		- - A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-11450 2026-06-9 01:16 2026-06-7 Show GitHub Exploit DB Packet Storm