Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1081 7.5 重要
Network
マイクロソフト Microsoft Windows Server 2022
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 22h2
Microsoft …
Windows NTLM のなりすましの脆弱性 CWE-200
CWE-noinfo
CVE-2026-50508 2026-06-22 11:32 2026-06-9 Show GitHub Exploit DB Packet Storm
1082 7.5 重要
Network
LLDAP lldap LLDAPのlldapにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-50889 2026-06-22 11:32 2026-06-15 Show GitHub Exploit DB Packet Storm
1083 4.5 警告
Adjacent
ネットギア R6900P ファームウェア
RAXE450 Firmware
R7960P ファームウェア
R7000 ファームウェア
rax42 ファームウェア
mr80 ファームウェア
MR70 FIRMWARE
MR60 ファームウェア
MS60 ファームウェア
ネットギアのEX3700 ファームウェア等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-9210 2026-06-22 11:32 2026-06-9 Show GitHub Exploit DB Packet Storm
1084 8.8 重要
Adjacent
ネットギア RAXE300 ファームウェア
RAX30 ファームウェア
CAX30 ファームウェア
RAX5 FIRMWARE
ネットギアのCAX30 ファームウェア等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-9211 2026-06-22 11:32 2026-06-9 Show GitHub Exploit DB Packet Storm
1085 8 重要
Adjacent
ネットギア RBR40 ファームウェア
XR450 ファームウェア
RAX36S Firmware
RBR50 ファームウェア
RAX78 Firmware
RBS20 ファームウェア
RAX10 FIRMWARE
RAX70 Firmware
RBS50 ファームウェア…
ネットギアのLBR1020 ファームウェア等の複数製品における複数の脆弱性 CWE-20
CWE-306
CVE-2026-9212 2026-06-22 11:32 2026-06-9 Show GitHub Exploit DB Packet Storm
1086 8.1 重要
Network
ネットギア RAXE500 Firmware
XR1000 ファームウェア
MR70 FIRMWARE
MS70 FIRMWARE
ネットギアのMR70 FIRMWARE等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-9213 2026-06-22 11:32 2026-06-9 Show GitHub Exploit DB Packet Storm
1087 7.8 重要
Local
デル Dell Peripheral Manager デルのDell Peripheral Managerにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2024-22447 2026-06-22 11:32 2026-06-16 Show GitHub Exploit DB Packet Storm
1088 4.3 警告
Network
Google Android GoogleのAndroidにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合
CVE-2025-48571 2026-06-22 11:32 2026-06-17 Show GitHub Exploit DB Packet Storm
1089 7.8 重要
Local
Google Android GoogleのAndroidにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-48617 2026-06-22 11:32 2026-06-17 Show GitHub Exploit DB Packet Storm
1090 8 重要
Adjacent
Google Android GoogleのAndroidにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-48640 2026-06-22 11:32 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254241 8.1 HIGH
Network
jenkins black_duck_hub An improper authorization vulnerability exists in Jenkins Black Duck Hub Plugin 3.0.3 and older in PostBuildScanDescriptor.java that allows users with Overall/Read permission to read and write the Bl… CWE-863
 Incorrect Authorization
CVE-2018-1000197 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254242 6.5 MEDIUM
Network
jenkins gitlab_hook A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlab_notifier.rb, views/gitlab_notifier/global.erb that allows attackers with local Jenkins… CWE-200
Information Exposure
CVE-2018-1000196 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254243 4.3 MEDIUM
Network
jenkins
oracle
jenkins
communications_cloud_native_core_automated_test_suite
A server-side request forgery vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in ZipExtractionInstaller.java that allows users with Overall/Read permission to have Jenkins subm… CWE-352
 Origin Validation Error
CVE-2018-1000195 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254244 8.1 HIGH
Network
jenkins
oracle
jenkins
communications_cloud_native_core_automated_test_suite
A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write arbitrary files on the… CWE-22
Path Traversal
CVE-2018-1000194 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254245 4.3 MEDIUM
Network
jenkins
oracle
jenkins
communications_cloud_native_core_automated_test_suite
A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names … CWE-74
Injection
CVE-2018-1000193 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254246 4.3 MEDIUM
Network
jenkins
oracle
jenkins
communications_cloud_native_core_automated_test_suite
A information exposure vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in AboutJenkins.java, ListPluginsCommand.java that allows users with Overall/Read access to enumerate all… NVD-CWE-noinfo
CVE-2018-1000192 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254247 6.5 MEDIUM
Network
jenkins synopsys_detect A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to co… CWE-200
Information Exposure
CVE-2018-1000191 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254248 6.5 MEDIUM
Network
jenkins black_duck_hub A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to … CWE-200
Information Exposure
CVE-2018-1000190 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254249 8.8 HIGH
Network
jenkins absint_astree A command execution vulnerability exists in Jenkins Absint Astree Plugin 1.0.5 and older in AstreeBuilder.java that allows attackers with Overall/Read access to execute a command on the Jenkins maste… NVD-CWE-noinfo
CVE-2018-1000189 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
254250 5.4 MEDIUM
Network
jenkins cas A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-1000188 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm