Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1121	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-34183	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1122	5.5	警告 Local	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-34657	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1123	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-34711	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1124	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-34712	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1125	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34713	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1126	5	警告 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-35188	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1127	5.4	警告 Network	VMware	VMware Telco Cloud Platform VMware Aria Operations VMware Cloud Foundation	VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41724	2026-06-16 13:38	2026-06-8	Show	GitHub Exploit DB Packet Storm

1128	5.3	警告 Network	VMware	Spring Framework	VMwareのSpring FrameworkにおけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-41853	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1129	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41854	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

1130	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-42764	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4171	7.3	HIGH Network	-	-	picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go). The guardCommand() function attempts to restrict shell command execution using a d…	CWE-78 OS Command	CVE-2026-36045	2026-06-2 03:09	2026-05-27	Show	GitHub Exploit DB Packet Storm

4172	4.3	MEDIUM Network	-	-	A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile strings). gf_media…	CWE-476 NULL Pointer Dereference	CVE-2025-70116	2026-06-2 03:09	2026-05-28	Show	GitHub Exploit DB Packet Storm

4173	5.3	MEDIUM Network	-	-	Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2025-67903	2026-06-2 03:09	2026-05-28	Show	GitHub Exploit DB Packet Storm

4174	3.7	LOW Network	-	-	Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control.	CWE-269 Improper Privilege Management	CVE-2026-33552	2026-06-2 03:09	2026-05-28	Show	GitHub Exploit DB Packet Storm

4175	3.1	LOW Network	-	-	Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal.	CWE-22 Path Traversal	CVE-2026-49009	2026-06-2 03:09	2026-05-28	Show	GitHub Exploit DB Packet Storm

4176	7.8	HIGH Local	-	-	Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can l…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-27788	2026-06-2 03:09	2026-06-1	Show	GitHub Exploit DB Packet Storm

4177	7.8	HIGH Local	-	-	Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the server where the affec…	CWE-268 Privilege Chaining	CVE-2026-32325	2026-06-2 03:09	2026-06-1	Show	GitHub Exploit DB Packet Storm

4178	7.5	HIGH Network	-	-	FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent. The near-RT RIC assumes a mapping between SCTP association and E2 node always exists in the cleanup path …	CWE-617 Reachable Assertion	CVE-2026-37220	2026-06-2 03:09	2026-06-2	Show	GitHub Exploit DB Packet Storm

4179	7.5	HIGH Network	-	-	FlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding pending event. The near-RT RIC uses assert() to enforce the existence of a pending e…	CWE-617 Reachable Assertion	CVE-2026-37221	2026-06-2 03:09	2026-06-2	Show	GitHub Exploit DB Packet Storm

4180	-		-	-	FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages. A remote unauthenticated attacker can send a valid E2AP PDU containing an unexpected num…	-	CVE-2026-37222	2026-06-2 03:09	2026-06-2	Show	GitHub Exploit DB Packet Storm