Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1191	7.8	重要 Local	アドビシステムズ	Adobe Acrobat Reader DC Adobe Acrobat Adobe Acrobat DC	アドビのAdobe Acrobat等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-47965	2026-06-22 11:49	2026-06-12	Show	GitHub Exploit DB Packet Storm

1192	8.2	重要 Network	アドビシステムズ	Adobe Acrobat	アドビのAdobe Acrobatにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-48294	2026-06-22 11:49	2026-06-17	Show	GitHub Exploit DB Packet Storm

1193	9.3	緊急 Network	Rocket.Chat	Rocket.Chat	Rocket.Chatにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-48616	2026-06-22 11:49	2026-06-17	Show	GitHub Exploit DB Packet Storm

1194	7.5	重要 Network	ws project	ws	ws projectのwsにおける複数の脆弱性	CWE-400 CWE-770	CVE-2026-48779	2026-06-22 11:49	2026-06-17	Show	GitHub Exploit DB Packet Storm

1195	7.5	重要 Network	Rocket.Chat	Rocket.Chat	Rocket.Chatにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-48929	2026-06-22 11:49	2026-06-17	Show	GitHub Exploit DB Packet Storm

1196	9.8	緊急 Network	MariaDB Corporation Ab.	MariaDB	MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-49261	2026-06-22 11:49	2026-06-11	Show	GitHub Exploit DB Packet Storm

1197	9.1	緊急 Network	Apache Software Foundation	Apache Shiro	Apache Software FoundationのApache ShiroにおけるLDAP インジェクションの脆弱性	CWE-90 LDAP インジェクション	CVE-2026-49268	2026-06-22 11:48	2026-06-17	Show	GitHub Exploit DB Packet Storm

1198	7	重要 Local	マイクロソフト	Microsoft Malware Protection Engine	Microsoft Defender Elevation of Privilege Vulnerability	CWE-59 リンク解釈の問題	CVE-2026-50656	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

1199	8.1	重要 Network	KubeV2V	Migration assessment	KubeV2VのMigration assessmentにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-53469	2026-06-22 11:48	2026-06-10	Show	GitHub Exploit DB Packet Storm

1200	8.1	重要 Network	KubeV2V	Migration assessment	KubeV2VのMigration assessmentにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-53470	2026-06-22 11:48	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1051	6.1	MEDIUM Network	-	-	A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could exploit the refresh parameter of the iFrame … New	CWE-79 Cross-site Scripting	CVE-2026-50740	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1052	8.8	HIGH Network	-	-	Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin ident… New	CWE-94 Code Injection	CVE-2026-50741	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1053	4.4	MEDIUM Network	-	-	A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without… New	CWE-79 Cross-site Scripting	CVE-2026-50742	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1054	4.3	MEDIUM Network	-	-	A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method … New	CWE-284 Improper Access Control	CVE-2026-50744	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1055	4.7	MEDIUM Network	-	-	A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty cus… New	CWE-79 Cross-site Scripting	CVE-2026-50745	2026-06-27 01:11	2026-06-26	Show	GitHub Exploit DB Packet Storm

1056	-		-	-	FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, w… New	CWE-306 Missing Authentication for Critical Function	CVE-2026-43920	2026-06-27 01:10	2026-06-26	Show	GitHub Exploit DB Packet Storm

1057	6.5	MEDIUM Network	-	-	The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to unauthor… New	CWE-862 Missing Authorization	CVE-2026-1869	2026-06-27 00:49	2026-06-26	Show	GitHub Exploit DB Packet Storm

1058	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS. This issue affects Exclusive Addons E… New	CWE-79 Cross-site Scripting	CVE-2026-57620	2026-06-27 00:49	2026-06-26	Show	GitHub Exploit DB Packet Storm

1059	5.3	MEDIUM Network	-	-	Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions. New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2025-66123	2026-06-27 00:49	2026-06-27	Show	GitHub Exploit DB Packet Storm

1060	5.3	MEDIUM Network	-	-	Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions. New	CWE-862 Missing Authorization	CVE-2026-24547	2026-06-27 00:49	2026-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed