Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6281 6.5 警告
Network
nothings stb vorbis.c nothingsのstb vorbis.cにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-5316 2026-05-7 12:28 2026-04-2 Show GitHub Exploit DB Packet Storm
6282 8.8 重要
Network
nothings stb vorbis.c nothingsのstb vorbis.cにおける複数の脆弱性 CWE-119
CWE-787
CVE-2026-5317 2026-05-7 12:28 2026-04-2 Show GitHub Exploit DB Packet Storm
6283 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. ch22 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のch22 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5604 2026-05-7 12:28 2026-04-5 Show GitHub Exploit DB Packet Storm
6284 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. ch22 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のch22 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5605 2026-05-7 12:28 2026-04-6 Show GitHub Exploit DB Packet Storm
6285 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. HG3 Firmware Shenzhen Tenda Technology Co.,Ltd.のHG3 Firmwareにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-7119 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
6286 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. HG3 Firmware Shenzhen Tenda Technology Co.,Ltd.のHG3 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7151 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
6287 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. HG3 Firmware Shenzhen Tenda Technology Co.,Ltd.のHG3 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7160 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
6288 7.3 重要
Network
NextChat NextChat NextChatにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-7177 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
6289 7.3 重要
Network
NextChat NextChat NextChatにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-7178 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
6290 7.3 重要
Network
Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird
Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-119
CWE-787
CVE-2026-7323 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1641 6.5 MEDIUM
Network
google chrome Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cra… CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-11658 2026-06-11 03:30 2026-06-9 Show GitHub Exploit DB Packet Storm
1642 6.5 MEDIUM
Network
google chrome Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page… CWE-20
 Improper Input Validation 
CVE-2026-11653 2026-06-11 03:29 2026-06-9 Show GitHub Exploit DB Packet Storm
1643 5.5 MEDIUM
Local
cilium ebpf A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipul… CWE-189
CWE-190
Numeric Errors
 Integer Overflow or Wraparound
CVE-2026-10722 2026-06-11 03:28 2026-06-3 Show GitHub Exploit DB Packet Storm
1644 7.8 HIGH
Local
synology active_backup_for_business_recovery_media_creator An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users t… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-49036 2026-06-11 03:20 2026-06-3 Show GitHub Exploit DB Packet Storm
1645 5.3 MEDIUM
Local
lmsys sglang A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service.… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-10775 2026-06-11 03:19 2026-06-4 Show GitHub Exploit DB Packet Storm
1646 - - - An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenticated attacker to e… CWE-78
OS Command 
CVE-2026-9151 2026-06-11 03:17 2026-06-11 Show GitHub Exploit DB Packet Storm
1647 2.7 LOW
Network
- - A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This… CWE-1220
 Insufficient Granularity of Access Control
CVE-2026-9088 2026-06-11 03:17 2026-06-5 Show GitHub Exploit DB Packet Storm
1648 8.5 HIGH
Network
- - Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, Fission added PodSpec safety val… CWE-269
CWE-732
 Improper Privilege Management
 Incorrect Permission Assignment for Critical Resource
CVE-2026-50570 2026-06-11 03:17 2026-06-11 Show GitHub Exploit DB Packet Storm
1649 4.3 MEDIUM
Network
- - Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, HTTPTriggerSpec.Validate() valid… CWE-20
 Improper Input Validation 
CVE-2026-50569 2026-06-11 03:17 2026-06-11 Show GitHub Exploit DB Packet Storm
1650 3.6 LOW
Local
- - Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, SanitizeFilePath in pkg/utils/ut… CWE-41
 Improper Resolution of Path Equivalence
CVE-2026-50568 2026-06-11 03:17 2026-06-11 Show GitHub Exploit DB Packet Storm