Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
911 5.5 警告
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-401
CWE-770
CVE-2026-45682 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
912 3.8 低
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-127
CWE-200
CVE-2026-45683 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
913 5.3 警告
Local 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-126
CWE-787
CVE-2026-45684 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
914 7.5 重要
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける複数の脆弱性 CWE-20
CWE-248
CWE-704
CVE-2026-45685 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
915 7.5 重要
Network 		opentelemetry eBPF Instrumentation opentelemetryのeBPF Instrumentationにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-45686 2026-06-5 10:50 2026-06-2 Show GitHub Exploit DB Packet Storm
916 8.8 重要
Adjacent 		TP-LINK Technologies Archer C64 Firmware TP-LINK TechnologiesのArcher C64 Firmwareにおける複数の脆弱性 CWE-288
CWE-306
CVE-2026-8697 2026-06-5 10:50 2026-05-28 Show GitHub Exploit DB Packet Storm
917 9.8 緊急
Network 		Mirasvit Full Page Cache Warmer MirasvitのFull Page Cache Warmerにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-45247 2026-06-5 10:50 2026-05-26 Show GitHub Exploit DB Packet Storm
918 7.8 重要
Local 		Google Android GoogleのAndroidにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2025-48649 2026-06-5 10:50 2026-06-1 Show GitHub Exploit DB Packet Storm
919 7.8 重要
Local 		Google Android GoogleのAndroidにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-0009 2026-06-5 10:50 2026-06-1 Show GitHub Exploit DB Packet Storm
920 7.8 重要
Local 		Google Android GoogleのAndroidにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-0036 2026-06-5 10:50 2026-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 4.0 MEDIUM
Network 		- - Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sending specifically crafted non-Medib… Update CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2021-4479 2026-06-11 02:16 2026-06-3 Show GitHub Exploit DB Packet Storm
142 7.9 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. New CWE-1329
 Reliance on Component That is Not Updateable 		CVE-2026-48573 2026-06-11 02:15 2026-06-10 Show GitHub Exploit DB Packet Storm
143 6.8 MEDIUM
Physics 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. New CWE-306
Missing Authentication for Critical Function 		CVE-2026-50507 2026-06-11 01:33 2026-06-10 Show GitHub Exploit DB Packet Storm
144 - - - A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper traffic between the router and the Internet, to execute code on the device. New CWE-20
 Improper Input Validation  		CVE-2026-9213 2026-06-11 01:17 2026-06-10 Show GitHub Exploit DB Packet Storm
145 - - - Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain conf… New CWE-20
CWE-306
 Improper Input Validation 
Missing Authentication for Critical Function 		CVE-2026-9212 2026-06-11 01:17 2026-06-10 Show GitHub Exploit DB Packet Storm
146 6.5 MEDIUM
Network 		- - Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set. New CWE-36
 Absolute Path Traversal 		CVE-2026-53698 2026-06-11 01:17 2026-06-11 Show GitHub Exploit DB Packet Storm
147 - - - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2. New CWE-88
Argument Injection 		CVE-2026-53694 2026-06-11 01:17 2026-06-11 Show GitHub Exploit DB Packet Storm
148 - - - A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identifiers, cluster names… New CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output 		CVE-2026-53693 2026-06-11 01:17 2026-06-11 Show GitHub Exploit DB Packet Storm
149 9.6 CRITICAL
Network 		- - A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens (JWTs) for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the … New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-53471 2026-06-11 01:17 2026-06-11 Show GitHub Exploit DB Packet Storm
150 5.3 MEDIUM
Network 		- - Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenki… New CWE-311
Missing Encryption of Sensitive Data 		CVE-2026-53442 2026-06-11 01:17 2026-06-10 Show GitHub Exploit DB Packet Storm