Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5901 8.8 重要
Network 		Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5612 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5902 8.8 重要
Network 		Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5613 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5903 8.8 重要
Network 		Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5614 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5904 8.8 重要
Network 		Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5628 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5905 8.8 重要
Network 		Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5629 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5906 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC15 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC15 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5830 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
5907 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. Tenda i3 Firmware Shenzhen Tenda Technology Co.,Ltd.のTenda i3 Firmwareにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-5841 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
5908 7.2 重要
Network 		ディーリンクジャパン株式会社 dir-882 ファームウェア D-Link CorporationのDIR-882 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5844 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
5909 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. I12 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のI12 ファームウェアにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-5849 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
5910 5.5 警告
Local 		Foxit pdf editor
pdf reader 		Foxitのpdf editor等の複数製品におけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外 		CVE-2026-5937 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1411 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. CWE-59
Link Following 		CVE-2026-42989 2026-06-12 00:45 2026-06-10 Show GitHub Exploit DB Packet Storm
1412 7.8 HIGH
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2025 		Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-42991 2026-06-12 00:43 2026-06-10 Show GitHub Exploit DB Packet Storm
1413 5.3 MEDIUM
Network 		vmware spring_framework A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker t… CWE-863
 Incorrect Authorization 		CVE-2026-41852 2026-06-12 00:43 2026-06-9 Show GitHub Exploit DB Packet Storm
1414 8.4 HIGH
Local 		microsoft 365_apps
microsoft_365
office_2019
office_2021
office_2024
sharepoint_server
word 		Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. CWE-416
 Use After Free 		CVE-2026-45458 2026-06-12 00:37 2026-06-10 Show GitHub Exploit DB Packet Storm
1415 - - - Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges,… CWE-345
CWE-1240
 Insufficient Verification of Data Authenticity
 Use of a Cryptographic Primitive with a Risky Implementation 		CVE-2026-46654 2026-06-12 00:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1416 - - - Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endpoint with a ?filter= query string of a few thousand nested parentheses (≈ 4–12 … CWE-248
CWE-400
CWE-674
 Uncaught Exception
 Uncontrolled Resource Consumption
 Uncontrolled Recursion 		CVE-2026-46689 2026-06-12 00:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1417 5.4 MEDIUM
Network 		apache answer Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in … CWE-80
CWE-79
Basic XSS
Cross-site Scripting 		CVE-2026-34033 2026-06-12 00:35 2026-06-9 Show GitHub Exploit DB Packet Storm
1418 - - - SpiceDB is an open source database system for creating and managing security-critical application permissions. From version 1.15.0 to before version 1.52.0, caveat structures with nested lists can re… CWE-285
Improper Authorization 		CVE-2026-46668 2026-06-12 00:35 2026-06-11 Show GitHub Exploit DB Packet Storm
1419 - - - Allocation of Resources Without Limits or Throttling vulnerability in membraneframework membrane_mp4_plugin allows unauthenticated denial-of-service via BEAM atom table exhaustion. The MP4 box heade… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-53423 2026-06-12 00:35 2026-06-11 Show GitHub Exploit DB Packet Storm
1420 7.0 HIGH
Local 		microsoft windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2022
windows_server_2025 		Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-45487 2026-06-12 00:35 2026-06-10 Show GitHub Exploit DB Packet Storm