Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6051 9.8 緊急
Network 		Pipecat Pipecat Pipecatにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-62373 2026-04-30 12:08 2026-04-23 Show GitHub Exploit DB Packet Storm
6052 7.8 重要
Local 		Amazon.com, Inc. Kiro IDE Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-0830 2026-04-30 12:08 2026-01-9 Show GitHub Exploit DB Packet Storm
6053 5.4 警告
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-25720 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
6054 9.8 緊急
Network 		huggingface LeRobot huggingfaceのLeRobotにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-25874 2026-04-30 12:08 2026-04-23 Show GitHub Exploit DB Packet Storm
6055 8.1 重要
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-27841 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
6056 9.1 緊急
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-27843 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
6057 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-33524 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
6058 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-33666 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
6059 7.5 重要
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35064 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
6060 7.1 重要
Local 		Gwenhael Goavec-Merou (trabucayre) openFPGALoader Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-35170 2026-04-30 12:08 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 5.5 MEDIUM
Local 		- - Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AV… New CWE-590
 Free of Memory not on the Heap 		CVE-2025-7006 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
152 5.5 MEDIUM
Local 		- - Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivi… New CWE-674
 Uncontrolled Recursion 		CVE-2025-7005 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
153 7.8 HIGH
Local 		- - Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue… New CWE-787
 Out-of-bounds Write 		CVE-2025-7004 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
154 7.8 HIGH
Local 		- - Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This… New CWE-125
Out-of-bounds Read 		CVE-2025-7003 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
155 7.8 HIGH
Local 		- - Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This… New CWE-125
Out-of-bounds Read 		CVE-2025-7002 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
156 5.5 MEDIUM
Local 		- - A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. New CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2025-46313 2026-06-13 07:16 2026-06-12 Show GitHub Exploit DB Packet Storm
157 5.5 MEDIUM
Local 		- - This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data. New CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2025-43278 2026-06-13 07:16 2026-06-12 Show GitHub Exploit DB Packet Storm
158 5.5 MEDIUM
Local 		- - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system ter… New CWE-284
Improper Access Control 		CVE-2025-24165 2026-06-13 07:16 2026-06-12 Show GitHub Exploit DB Packet Storm
159 - - - Rejected reason: This candidate was issued in error. New - CVE-2020-2521 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
160 - - - A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharing_group_id to a sharing … New CWE-863
 Incorrect Authorization 		CVE-2026-54397 2026-06-13 06:16 2026-06-13 Show GitHub Exploit DB Packet Storm