Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133341 6.4 警告
Network 		Open-Xchange OX App Suite OX App Suite におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2021-23927 2021-09-15 17:28 2021-01-12 Show GitHub Exploit DB Packet Storm
133342 5.5 警告
Local 		array-queue プロジェクト array-queue Rust 用 array-queue crate における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2020-35900 2021-09-15 17:26 2020-09-26 Show GitHub Exploit DB Packet Storm
133343 7.8 重要
Local 		K7 Computing Ultimate Security
K7 AntiVirus
Enterprise Security
Total Security 		K7Computing Pvt Ltd K7AntiVirus Premium における権限管理に関する脆弱性 CWE-120
CWE-269
CVE-2018-9333 2021-09-15 17:26 2018-04-5 Show GitHub Exploit DB Packet Storm
133344 7.8 重要
Local 		K7 Computing Ultimate Security
K7 AntiVirus
Enterprise Security
Total Security 		K7Computing Pvt Ltd K7AntiVirus Premium における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2018-9332 2021-09-15 17:26 2018-04-5 Show GitHub Exploit DB Packet Storm
133345 7.8 重要
Local 		K7 Computing Ultimate Security
K7 AntiVirus
Enterprise Security
Total Security 		K7Computing Pvt Ltd K7AntiVirus Premium における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2018-8726 2021-09-15 17:26 2018-03-15 Show GitHub Exploit DB Packet Storm
133346 7.8 重要
Local 		K7 Computing Ultimate Security
K7 AntiVirus
Enterprise Security
Total Security 		K7Computing Pvt Ltd K7AntiVirus Premium における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2018-8725 2021-09-15 17:26 2018-03-15 Show GitHub Exploit DB Packet Storm
133347 7.8 重要
Local 		K7 Computing Ultimate Security
K7 AntiVirus
Enterprise Security
Total Security 		K7Computing Pvt Ltd K7AntiVirus Premium における不正な認証に関する脆弱性 CWE-269
CWE-863
CVE-2018-8724 2021-09-15 17:26 2018-03-15 Show GitHub Exploit DB Packet Storm
133348 7.8 重要
Local 		K7 Computing Ultimate Security
K7 AntiVirus
Enterprise Security
Total Security 		K7Computing Pvt Ltd K7AntiVirus Premium における権限管理に関する脆弱性 CWE-269
CWE-863
CVE-2018-8044 2021-09-15 17:26 2018-03-10 Show GitHub Exploit DB Packet Storm
133349 7.5 重要
Network 		K7 Computing Ultimate Security
K7 AntiVirus
Enterprise Security
Total Security 		K7Computing K7AntiVirus Premium における有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2018-11246 2021-09-15 17:26 2018-05-18 Show GitHub Exploit DB Packet Storm
133350 5.5 警告
Local 		crossbeam-channel プロジェクト crossbeam-channel Rust 用 crossbeam-channel crate における脆弱性 CWE-noinfo
情報不足 		CVE-2020-35904 2021-09-15 16:53 2020-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 8.8 HIGH
Network 		- - Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document - the diagram filename … New CWE-78
OS Command  		CVE-2026-49492 2026-06-6 03:59 2026-06-6 Show GitHub Exploit DB Packet Storm
2 8.8 HIGH
Network 		- - Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block content as code via vm.runInNewContext(), allowing arbitrary code execution. A… New CWE-94
Code Injection 		CVE-2026-49493 2026-06-6 03:59 2026-06-6 Show GitHub Exploit DB Packet Storm
3 8.8 HIGH
Network 		- - Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval(), allowing arbitrary JavaScript execution. The flaw affects every render path - th… New CWE-95
Eval Injection 		CVE-2026-50733 2026-06-6 03:59 2026-06-6 Show GitHub Exploit DB Packet Storm
4 4.3 MEDIUM
Network 		strawberry strawberry_graphql Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled GraphiQL template wrote values from the GraphiQL headers editor into the browser U… New CWE-200
CWE-201
Information Exposure
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-45739 2026-06-6 03:43 2026-06-5 Show GitHub Exploit DB Packet Storm
5 4.3 MEDIUM
Network 		synology hyper_backup An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated use… New CWE-22
Path Traversal 		CVE-2024-47273 2026-06-6 03:32 2026-06-3 Show GitHub Exploit DB Packet Storm
6 4.1 MEDIUM
Network 		synology hyper_backup An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote authenti… New CWE-22
Path Traversal 		CVE-2024-47263 2026-06-6 03:31 2026-06-3 Show GitHub Exploit DB Packet Storm
7 5.9 MEDIUM
Network 		synology note_station_client A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential. New CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2023-52951 2026-06-6 03:20 2026-06-3 Show GitHub Exploit DB Packet Storm
8 7.8 HIGH
Local 		synology hyper_backup_explorer An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute arbitrary code via u… New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2022-49042 2026-06-6 03:19 2026-06-3 Show GitHub Exploit DB Packet Storm
9 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6209 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm
10 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6208 2026-06-6 03:17 2026-06-6 Show GitHub Exploit DB Packet Storm