Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1351	5.4	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における常に不適切な制御フローの実装に関する脆弱性	CWE-670 常に不適切な制御フローの実装	CVE-2026-12321	2026-06-17 15:34	2026-06-16	Show	GitHub Exploit DB Packet Storm

1352	5.4	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-12322	2026-06-17 15:34	2026-06-16	Show	GitHub Exploit DB Packet Storm

1353	5.4	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-12323	2026-06-17 15:34	2026-06-16	Show	GitHub Exploit DB Packet Storm

1354	6.5	警告 Network	キヤノン	PCソフトウェア EOS Network Setting Tool	キヤノン製EOS Network Setting Toolにおける複数の脆弱性	CWE-1188 CWE-295 CWE-321 CWE-327	CVE-2026-9258 CVE-2026-9259 CVE-2026-9260 CVE-2026-9261 CVE-2026-9262	2026-06-17 13:38	2026-06-16	Show	GitHub Exploit DB Packet Storm

1355	7.2	重要 Network	Micro-Star INT'L CO., LTD	RadiX AX6600 WiFi 6 Tri-Band Gaming Router	RadiX AX6600 WiFi 6 Tri-Band Gaming RouterにおけるOSコマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-53876	2026-06-17 12:07	2026-06-17	Show	GitHub Exploit DB Packet Storm

1356	-	-	三菱電機	ルームエアコン向け無線LANアダプター冷蔵庫炊飯器パッケージエアコンロスナイセントラル換気システム換気扇用・ロスナイ用スマートスイッチバス乾燥・暖房・換気システムルームエアコンヒートポンプ給湯機・HEMS対応アダプター、無線LANアダプター IHクッキングヒーターエアフロー換気システム、ヒートポンプ式冷温水システム、換…	三菱電機製複数の家電製品におけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-5667	2026-06-16 15:07	2026-06-15	Show	GitHub Exploit DB Packet Storm

1357	-	-	（複数のベンダ）	（複数の製品）	OpenSSLにおける脆弱性に対するアップデート（2026年6月9日）	-	-	2026-06-16 15:07	2026-06-15	Show	GitHub Exploit DB Packet Storm

1358	7.5	重要 Network	image-size	image-size	image-sizeにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2025-71319	2026-06-16 13:41	2026-06-9	Show	GitHub Exploit DB Packet Storm

1359	7.5	重要 Network	image-size	image-size	image-sizeにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2025-71329	2026-06-16 13:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

1360	7.5	重要 Network	image-size	image-size	image-sizeにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2025-71330	2026-06-16 13:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254581	4.8	MEDIUM Network	jenkins	pipeline_nodes_and_processes	On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline `n…	CWE-862 Missing Authorization	CVE-2018-1000015	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254582	8.8	HIGH Network	jenkins	translation_assistance	Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings di…	CWE-352 Origin Validation Error	CVE-2018-1000014	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254583	8.8	HIGH Network	jenkins	release	Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds.	CWE-352 Origin Validation Error	CVE-2018-1000013	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254584	8.8	HIGH Network	jenkins	warnings	Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from t…	CWE-611 XXE	CVE-2018-1000012	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254585	8.8	HIGH Network	jenkins	findbugs	Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from t…	CWE-611 XXE	CVE-2018-1000011	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254586	8.8	HIGH Network	jenkins	dry	Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Je…	CWE-611 XXE	CVE-2018-1000010	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254587	8.8	HIGH Network	jenkins	checkstyle	Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from…	CWE-611 XXE	CVE-2018-1000009	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254588	8.8	HIGH Network	jenkins	pmd	Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Je…	CWE-611 XXE	CVE-2018-1000008	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254589	8.8	HIGH Network	microsoft	word office office_compatibility_pack	Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way ob…	NVD-CWE-noinfo	CVE-2018-0862	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm

254590	8.8	HIGH Network	microsoft	word office office_compatibility_pack	Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way ob…	NVD-CWE-noinfo	CVE-2018-0849	2024-11-21 12:39	2018-01-23	Show	GitHub Exploit DB Packet Storm