Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1241 8.3 重要
Adjacent 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49203 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1242 6.5 警告
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-49204 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1243 8.2 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-50205 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1244 6.8 警告
Adjacent 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-50206 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
1245 7.8 重要
Local 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-50207 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
1246 9.4 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-50208 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
1247 7.8 重要
Local 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-50209 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
1248 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-50210 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
1249 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける書式文字列に関する脆弱性 CWE-134
書式文字列の問題 		CVE-2026-50211 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
1250 6.5 警告
Adjacent 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-50212 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 9.1 CRITICAL
Network 		- - ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, `apos.util.set()` traverses dot-notation paths without sanitizing `__proto__`, allowing an a… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-53609 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
82 8.7 HIGH
Network 		- - ApostropheCMS is an open-source Node.js content management system. Versions up to and including 1.4.2 of the `@apostrophecms/seo` package injects the Google Analytics Tracking ID (`seoGoogleTrackingI… New CWE-79
Cross-site Scripting 		CVE-2026-53608 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
83 6.8 MEDIUM
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the getRedirectURL function in oauth2.go:22-29 constructs t… New CWE-601
Open Redirect 		CVE-2026-53523 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
84 6.5 MEDIUM
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the Nezha dashboard exposes two endpoints that create long-… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-53522 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
85 6.4 MEDIUM
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/{id} accepts and persists nonexistent ddns_p… New CWE-863
 Incorrect Authorization 		CVE-2026-53521 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
86 6.5 MEDIUM
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through N… New CWE-284
Improper Access Control 		CVE-2026-53520 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
87 9.1 CRITICAL
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prior to version 2.0.13, fallbackToFrontend in the dashboard's NoRoute handler treats any URL whose raw… New CWE-22
Path Traversal 		CVE-2026-53519 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
88 5.3 MEDIUM
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.0 to before version 2.0.14, private services (`EnableShowInService: false`) are enumer… New CWE-200
CWE-285
CWE-863
Information Exposure
Improper Authorization
 Incorrect Authorization 		CVE-2026-49397 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
89 7.1 HIGH
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results fo… New CWE-862
 Missing Authorization 		CVE-2026-48119 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm
90 6.4 MEDIUM
Network 		- - Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.10, an authenticated Nezha dashboard user can create or updat… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-47268 2026-06-13 07:16 2026-06-13 Show GitHub Exploit DB Packet Storm