Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5381	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28904	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5382	7.5	重要 Network	アップル	iOS iPadOS tvOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28905	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5383	7.5	重要 Network		-	アップルのmacOSにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28908	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5384	7.5	重要 Network	アップル	iOS iPadOS tvOS watchOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28913	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5385	7.8	重要 Local		-	アップルのmacOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-28919	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5386	8.8	重要 Local		-	アップルのmacOSにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2026-28923	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5387	7.5	重要 Network		-	アップルのmacOSにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-28924	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5388	7.5	重要 Network		-	アップルのmacOSにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-28925	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5389	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な比較ロジックの粒度に関する脆弱性	CWE-1254 不正な比較ロジックの粒度	CVE-2026-28929	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5390	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28944	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3031	7.5	HIGH Network	google	chrome	Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security severity: High)	CWE-362 Race Condition	CVE-2026-1220	2026-06-13 04:47	2026-06-11	Show	GitHub Exploit DB Packet Storm

3032	7.5	HIGH Network	tdengine	tdengine	TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process b…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-42542	2026-06-13 04:40	2026-06-11	Show	GitHub Exploit DB Packet Storm

3033	7.5	HIGH Network	openvm	openvm	OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the openvm-pairing guest library's try_honest_pairing_check function invokes Theor…	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-46669	2026-06-13 04:38	2026-06-11	Show	GitHub Exploit DB Packet Storm

3034	4.6	MEDIUM Network	umbraco	umbraco_cms	Umbraco is an ASP.NET CMS. From version 14.0.0 to before version 17.4.0, authenticated users are able to inject HTML into an input field, which is rendered in the confirmation dialog without proper o…	CWE-79 Cross-site Scripting	CVE-2026-46609	2026-06-13 04:34	2026-06-11	Show	GitHub Exploit DB Packet Storm

3035	6.1	MEDIUM Network	umbraco	umbraco_cms	Umbraco is an ASP.NET CMS. Prior to versions 13.14.0 and 17.4.0, some of the Surface Controllers in the CMS provide to support member related operations fail to validate redirect URLs, making Razor t…	CWE-601 Open Redirect	CVE-2026-46616	2026-06-13 04:34	2026-06-11	Show	GitHub Exploit DB Packet Storm

3036	8.8	HIGH Network	apache	ofbiz	Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template inj…	CWE-94 Code Injection	CVE-2026-50223	2026-06-13 04:30	2026-06-11	Show	GitHub Exploit DB Packet Storm

3037	7.8	HIGH Local	microsoft	pc_manager	Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.	CWE-284 Improper Access Control	CVE-2026-49161	2026-06-13 04:30	2026-06-10	Show	GitHub Exploit DB Packet Storm

3038	9.8	CRITICAL Network	vmware	spring_for_graphql	Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Exec…	CWE-502 Deserialization of Untrusted Data	CVE-2026-41699	2026-06-13 04:28	2026-06-11	Show	GitHub Exploit DB Packet Storm

3039	8.1	HIGH Network	microsoft	teams	Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.	CWE-74 Injection	CVE-2026-42835	2026-06-13 04:28	2026-06-10	Show	GitHub Exploit DB Packet Storm

3040	8.2	HIGH Local	adobe	acrobat_dc acrobat_reader_dc acrobat	Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the cu…	CWE-427 Uncontrolled Search Path Element	CVE-2026-47937	2026-06-13 04:23	2026-06-10	Show	GitHub Exploit DB Packet Storm