Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 5.5 警告
Local 		マイクロソフト Visual Studio Code Visual Studio Code セキュリティ機能のバイパスの脆弱性 New CWE-20
CWE-23
CWE-noinfo
CVE-2026-48569 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
132 7.8 重要
Local 		マイクロソフト Microsoft PC Manager Microsoft PC マネージャーのセキュリティ機能バイパスの脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-49161 2026-06-15 11:15 2026-06-9 Show GitHub Exploit DB Packet Storm
133 8.8 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-50223 2026-06-15 11:15 2026-06-10 Show GitHub Exploit DB Packet Storm
134 6.5 警告
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける認証に関する脆弱性 New CWE-287
CWE-noinfo
CVE-2026-50623 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
135 5.3 警告
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるCRLF インジェクションの脆弱性 New CWE-93
CRLF インジェクション 		CVE-2026-50629 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
136 6.5 警告
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるHTTP レスポンス分割に関する脆弱性 New CWE-113
HTTP レスポンスの分割 		CVE-2026-50630 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
137 7.4 重要
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 New CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-50631 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
138 8.1 重要
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-50632 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
139 8.1 重要
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-50633 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
140 6.5 警告
Network 		Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるデジタル署名の検証に関する脆弱性 New CWE-347
デジタル署名の不適切な検証 		CVE-2026-50634 2026-06-15 11:15 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2721 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable to remote code execution via the newsletter custom template directory feature. O… CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-41065 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2722 - - - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vulnerability in the cache deletion endpoint allows authenticated API access t… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-40605 2026-06-5 01:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2723 4.6 MEDIUM
Physics 		- - The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive u… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2026-36178 2026-06-5 01:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2724 6.5 MEDIUM
Network 		- - (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the sa… - CVE-2026-27145 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
2725 7.5 HIGH
Network 		- - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-42504 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
2726 5.3 MEDIUM
Network 		- - When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or log… - CVE-2026-42507 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
2727 7.5 HIGH
Network 		- - ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform m… CWE-121
Stack-based Buffer Overflow 		CVE-2026-50031 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
2728 - - - In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request smuggling), which in turn can be… CWE-444
HTTP Request Smuggling 		CVE-2026-50052 2026-06-5 01:15 2026-06-3 Show GitHub Exploit DB Packet Storm
2729 - - - Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocat… CWE-367
CWE-770
 Time-of-check Time-of-use (TOCTOU) Race Condition
 Allocation of Resources Without Limits or Throttling 		CVE-2026-35202 2026-06-5 01:12 2026-06-3 Show GitHub Exploit DB Packet Storm
2730 5.3 MEDIUM
Network 		- - CloudburstMC Protocol is a protocol library for Minecraft Bedrock Edition. Prior to version 3.0.0.Beta12-20260420.182526-15, CloudburstMC Protocol is partially missing validation for FULL type authen… CWE-287
Improper Authentication 		CVE-2026-45289 2026-06-5 01:12 2026-06-3 Show GitHub Exploit DB Packet Storm