Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1041 8.8 重要
Network
Pointsharp ID Server PointsharpのID Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-3999 2026-06-9 14:12 2026-03-13 Show GitHub Exploit DB Packet Storm
1042 7.8 重要
Local
レッドハット
X.Org Foundation
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-50256 2026-06-9 14:12 2026-06-5 Show GitHub Exploit DB Packet Storm
1043 7.8 重要
Local
レッドハット
X.Org Foundation
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-50257 2026-06-9 14:12 2026-06-5 Show GitHub Exploit DB Packet Storm
1044 7.8 重要
Local
レッドハット
X.Org Foundation
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-50258 2026-06-9 14:12 2026-06-5 Show GitHub Exploit DB Packet Storm
1045 7.8 重要
Local
レッドハット
X.Org Foundation
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-50259 2026-06-9 14:12 2026-06-5 Show GitHub Exploit DB Packet Storm
1046 8.6 重要
Network
Vertex-app Vertex Vertex-appのVertexにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2024-40646 2026-06-9 14:12 2026-06-1 Show GitHub Exploit DB Packet Storm
1047 7.8 重要
Local
BitDefender napoca BitDefenderのnapocaにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-10046 2026-06-9 14:12 2026-06-2 Show GitHub Exploit DB Packet Storm
1048 7.8 重要
Local
BitDefender napoca BitDefenderのnapocaにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-10047 2026-06-9 14:11 2026-06-2 Show GitHub Exploit DB Packet Storm
1049 6.5 警告
Adjacent
エリクソン Packet Core Gateway (PCG) エリクソンのPacket Core Gateway (PCG)における不正な構文構造の不適切な処理に関する脆弱性 CWE-228
不正な構文構造の不適切な処理
CVE-2026-25657 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
1050 6.5 警告
Adjacent
エリクソン Packet Core Gateway (PCG) エリクソンのPacket Core Gateway (PCG)における欠損値の不適切な処理に関する脆弱性 CWE-230
欠損値の不適切な処理
CVE-2026-25658 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
101 7.8 HIGH
Local
- - Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write
CVE-2025-14098 2026-06-13 08:16 2026-06-13 Show GitHub Exploit DB Packet Storm
102 - - - An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with object editing permissions to assign a MISP object, or attributes contained within an object, to a sharing … New CWE-863
 Incorrect Authorization
CVE-2026-54398 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
103 - - - Rejected reason: CVE ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-53826. Reason: This candidate is a duplicate of CVE-2025-53826. Notes: All CVE users should reference CVE-2025… New - CVE-2026-54095 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
104 7.5 HIGH
Network
- - Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in… New CWE-306
Missing Authentication for Critical Function
CVE-2026-53868 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
105 4.3 MEDIUM
Network
- - Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated… New CWE-459
 Incomplete Cleanup
CVE-2026-53867 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
106 6.5 MEDIUM
Network
- - OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes instead of exact hostnames. Attackers can exploit this by craftin… New CWE-1023
 Incomplete Comparison with Missing Factors
CVE-2026-53839 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
107 9.8 CRITICAL
Network
- - OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic t… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-53838 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
108 3.7 LOW
Network
- - OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended DM policy decisions… New CWE-636
 Not Failing Securely ('Failing Open')
CVE-2026-53837 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
109 8.8 HIGH
Network
- - OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recogn… New CWE-184
 Incomplete Blacklist
CVE-2026-53836 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
110 4.3 MEDIUM
Network
- - OpenClaw before 2026.5.6 contains a configuration enforcement bypass vulnerability in Feishu dynamic-agent bindings that allows authenticated senders to create or update bindings without honoring con… New CWE-863
 Incorrect Authorization
CVE-2026-53835 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm