Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
91 7.2 重要
Network
Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおけるオープンリダイレクトの脆弱性 New CWE-601
オープンリダイレクト
CVE-2026-48895 2026-06-26 11:56 2026-06-19 Show GitHub Exploit DB Packet Storm
92 5.3 警告
Network
markdown-it project markdown-it markdown-it projectのmarkdown-itにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-48988 2026-06-26 11:56 2026-06-17 Show GitHub Exploit DB Packet Storm
93 9.1 緊急
Network
Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおけるデータの整合性検証不備に関する脆弱性 New CWE-354
データの整合性検証不備
CVE-2026-49230 2026-06-26 11:56 2026-06-19 Show GitHub Exploit DB Packet Storm
94 5.4 警告
Network
Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避
CVE-2026-49231 2026-06-26 11:56 2026-06-19 Show GitHub Exploit DB Packet Storm
95 3.3
Local
pypdf project pypdf pypdf projectのpypdfにおけるアルゴリズムの複雑さに関する脆弱性 New CWE-407
アルゴリズムの複雑性
CVE-2026-49460 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
96 5.5 警告
Local
pypdf project pypdf pypdf projectのpypdfにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-49461 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
97 9.8 緊急
Network
litellm litellm LiteLLMにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避
CVE-2026-49468 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
98 5.4 警告
Network
Eclipse Foundation Eclipse Open VSX Eclipse FoundationのEclipse Open VSXにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-4983 2026-06-26 11:56 2026-06-23 Show GitHub Exploit DB Packet Storm
99 9.3 緊急
Network
Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反
CVE-2026-49871 2026-06-26 11:56 2026-06-19 Show GitHub Exploit DB Packet Storm
100 8.1 重要
Network
Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおける認証に関する脆弱性 New CWE-287
不適切な認証
CVE-2026-49872 2026-06-26 11:56 2026-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254371 4.3 MEDIUM
Network
microsoft edge ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnera… CWE-787
 Out-of-bounds Write
CVE-2018-0939 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254372 7.5 HIGH
Network
microsoft edge ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnera… CWE-787
 Out-of-bounds Write
CVE-2018-0937 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254373 7.5 HIGH
Network
microsoft edge ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". … CWE-787
 Out-of-bounds Write
CVE-2018-0936 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254374 7.5 HIGH
Network
microsoft internet_explorer Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2… CWE-787
CWE-416
 Out-of-bounds Write
 Use After Free
CVE-2018-0935 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254375 6.5 MEDIUM
Network
microsoft exchange_server Microsoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumu… NVD-CWE-noinfo
CVE-2018-0940 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254376 7.5 HIGH
Network
microsoft edge
chakracore
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra S… CWE-787
CWE-755
 Out-of-bounds Write
 Improper Handling of Exceptional Conditions
CVE-2018-0934 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254377 7.5 HIGH
Network
microsoft edge
chakracore
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra S… CWE-787
 Out-of-bounds Write
CVE-2018-0933 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254378 4.3 MEDIUM
Network
microsoft edge
internet_explorer
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511… CWE-200
Information Exposure
CVE-2018-0932 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254379 7.5 HIGH
Network
microsoft edge ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra S… CWE-787
 Out-of-bounds Write
CVE-2018-0931 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm
254380 7.5 HIGH
Network
microsoft edge ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corrupti… CWE-787
 Out-of-bounds Write
CVE-2018-0930 2024-11-21 12:39 2018-03-15 Show GitHub Exploit DB Packet Storm