Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5721 3.7
Network
Cesanta Mongoose CesantaのMongooseにおける複数の脆弱性 CWE-345
CWE-347
CVE-2026-6986 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
5722 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. HG10 Firmware Shenzhen Tenda Technology Co.,Ltd.のHG10 Firmwareにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6988 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
5723 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. F453 Firmware Shenzhen Tenda Technology Co.,Ltd.のF453 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-6989 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
5724 7.2 重要
Network
シスコシステムズ (Linksys) mr9600 ファームウェア Linksysのmr9600 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-6992 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
5725 4.8 警告
Network
D-Link Systems, Inc. DSL-2740R ファームウェア D-Link CorporationのDSL-2740R ファームウェアにおける複数の脆弱性 CWE-79
CWE-94
CVE-2026-7027 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
5726 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のFH1202 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7034 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
5727 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のFH1202 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7035 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
5728 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. i9 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のi9 ファームウェアにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-7036 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
5729 7.3 重要
Network
D-Link Systems, Inc. DIR-822 ファームウェア D-Link CorporationのDIR-822 ファームウェアにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7067 2026-05-1 10:41 2026-04-27 Show GitHub Exploit DB Packet Storm
5730 8.8 重要
Adjacent
ディーリンクジャパン株式会社 dir-825 ファームウェア D-Link CorporationのDIR-825 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7068 2026-05-1 10:41 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
991 5.4 MEDIUM
Network
- - Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal without encoding. Because sanitize_text_field leaves quotes intact, a stored payload … CWE-79
Cross-site Scripting
CVE-2026-53741 2026-06-12 00:22 2026-06-11 Show GitHub Exploit DB Packet Storm
992 5.4 MEDIUM
Network
- - Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attr… CWE-79
Cross-site Scripting
CVE-2026-53742 2026-06-12 00:22 2026-06-11 Show GitHub Exploit DB Packet Storm
993 7.5 HIGH
Network
- - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by… CWE-789
 Memory Allocation with Excessive Size Value
CVE-2026-10142 2026-06-12 00:22 2026-06-11 Show GitHub Exploit DB Packet Storm
994 7.5 HIGH
Network
- - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supp… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-10143 2026-06-12 00:22 2026-06-11 Show GitHub Exploit DB Packet Storm
995 - - - A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This issue i… CWE-79
Cross-site Scripting
CVE-2026-0266 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
996 - - - An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the Glo… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-0267 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
997 - - - A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma Access Agent on Window… CWE-424
 Improper Protection of Alternate Path
CVE-2026-0268 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
998 - - - A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-0269 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
999 - - - A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipu… CWE-22
Path Traversal
CVE-2026-0270 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
1000 - - - A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This does not impact Pri… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-0271 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm