Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1461 5.3 警告
Network
guzzlephp psr-7 guzzlephpのpsr-7における複数の脆弱性 CWE-113
CWE-20
CWE-93
CVE-2026-49214 2026-06-16 13:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1462 9.8 緊急
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2026-49875 2026-06-16 13:36 2026-06-12 Show GitHub Exploit DB Packet Storm
1463 8.2 重要
Network
KARASZI Istvan Tmp KARASZI IstvanのTmpにおける複数の脆弱性 CWE-20
CWE-22
CVE-2026-49982 2026-06-16 13:36 2026-06-11 Show GitHub Exploit DB Packet Storm
1464 7.8 重要
Local
X.Org Foundation
レッドハット
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-50261 2026-06-16 13:35 2026-06-5 Show GitHub Exploit DB Packet Storm
1465 5.5 警告
Local
X.Org Foundation
レッドハット
X.Org X Server
xwayland
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-50262 2026-06-16 13:35 2026-06-5 Show GitHub Exploit DB Packet Storm
1466 7.8 重要
Local
マイクロソフト Microsoft PC Manager Microsoft PC Manager の特権昇格の脆弱性 CWE-59
リンク解釈の問題
CVE-2026-50511 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
1467 7.8 重要
Local
マイクロソフト Microsoft PC Manager Microsoft PC Manager の特権昇格の脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-50512 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
1468 9.1 緊急
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける代替名による認証回避に関する脆弱性 CWE-289
代替名による認証回避
CVE-2026-50627 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
1469 9.8 緊急
Network
Apache Software Foundation Apache CXF Apache Software FoundationのApache CXFにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-50628 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
1470 7.8 重要
Local
Vim Vim Vimにおける複数の脆弱性 CWE-829
CWE-94
CWE-95
CVE-2026-52858 2026-06-16 13:35 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254761 7.8 HIGH
Local
yayoi-kk kaikei
aoiro_shinkoku
kyuuyo
kyuuyo_keisan
hanbai
kokyaku_kanri
Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and… CWE-426
 Untrusted Search Path
CVE-2018-0624 2024-11-21 12:38 2018-09-7 Show GitHub Exploit DB Packet Storm
254762 7.8 HIGH
Local
yayoi-kk kaikei
aoiro_shinkoku
kyuuyo
kyuuyo_keisan
hanbai
kokyaku_kanri
Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and… CWE-426
 Untrusted Search Path
CVE-2018-0623 2024-11-21 12:38 2018-09-7 Show GitHub Exploit DB Packet Storm
254763 9.8 CRITICAL
Network
canonical
zsh
ubuntu_linux
zsh
An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line. CWE-20
 Improper Input Validation 
CVE-2018-0502 2024-11-21 12:38 2018-09-5 Show GitHub Exploit DB Packet Storm
254764 7.8 HIGH
Local
hibara attachecase AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors. CWE-94
Code Injection
CVE-2018-0675 2024-11-21 12:38 2018-09-4 Show GitHub Exploit DB Packet Storm
254765 7.8 HIGH
Local
hibara attachecase AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors. CWE-94
Code Injection
CVE-2018-0674 2024-11-21 12:38 2018-09-4 Show GitHub Exploit DB Packet Storm
254766 6.1 MEDIUM
Network
sixapart movable_type Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2018-0672 2024-11-21 12:38 2018-09-4 Show GitHub Exploit DB Packet Storm
254767 9.8 CRITICAL
Network
nomachine nomachine A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2018-0664 2024-11-21 12:38 2018-09-4 Show GitHub Exploit DB Packet Storm
254768 7.8 HIGH
Local
sony digital_paper_app Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. CWE-426
 Untrusted Search Path
CVE-2018-0656 2024-11-21 12:38 2018-09-4 Show GitHub Exploit DB Packet Storm
254769 7.8 HIGH
Local
ponsoftware explzh Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecified vectors. CWE-22
Path Traversal
CVE-2018-0646 2024-11-21 12:38 2018-09-4 Show GitHub Exploit DB Packet Storm
254770 6.1 MEDIUM
Network
qnap photo_station Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised application. CWE-79
Cross-site Scripting
CVE-2018-0715 2024-11-21 12:38 2018-08-27 Show GitHub Exploit DB Packet Storm