Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
151 5.3 警告
Network
OpenFGA OpenFGA
Helm Charts
OpenFGAのHelm Charts等の複数製品における複数の脆弱性 New CWE-345
CWE-668
CVE-2026-48096 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
152 7.8 重要
Local
アドビシステムズ Adobe InDesign アドビのAdobe InDesignにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-48293 2026-06-12 14:46 2026-06-9 Show GitHub Exploit DB Packet Storm
153 7.8 重要
Local
アドビシステムズ Adobe Substance 3D Sampler アドビのAdobe Substance 3D Samplerにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-48305 2026-06-12 14:46 2026-06-9 Show GitHub Exploit DB Packet Storm
154 7.8 重要
Local
アドビシステムズ Adobe Substance 3D Sampler アドビのAdobe Substance 3D Samplerにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-48306 2026-06-12 14:46 2026-06-9 Show GitHub Exploit DB Packet Storm
155 5.5 警告
Local
ImageMagick ImageMagick ImageMagickにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-48724 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
156 4.7 警告
Local
ImageMagick ImageMagick ImageMagickにおける無限ループに関する脆弱性 New CWE-835
無限ループ
CVE-2026-48733 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
157 5.5 警告
Local
ImageMagick ImageMagick ImageMagickにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御
CVE-2026-48734 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
158 5.9 警告
Network
ImageMagick ImageMagick ImageMagickにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-48994 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
159 7.5 重要
Network
ImageMagick ImageMagick ImageMagickにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認
CVE-2026-49218 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
160 5.5 警告
Local
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 New CWE-200
CWE-22
CWE-78
CWE-863
CVE-2026-49219 2026-06-12 14:46 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319771 7.5 HIGH
Network
gitlab gitlab ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of s… CWE-1333
 Inefficient Regular Expression Complexity
CVE-2024-2800 2024-09-18 21:42 2024-08-8 Show GitHub Exploit DB Packet Storm
319772 5.4 MEDIUM
Network
gitlab gitlab A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When view… CWE-79
Cross-site Scripting
CVE-2024-4207 2024-09-18 21:41 2024-08-8 Show GitHub Exploit DB Packet Storm
319773 8.8 HIGH
Network
google
microsoft
chrome
edge_chromium
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2024-7965 2024-09-18 21:40 2024-08-22 Show GitHub Exploit DB Packet Storm
319774 8.8 HIGH
Network
redhat openshift_data_science
openshift_ai
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option … NVD-CWE-Other
CVE-2024-7557 2024-09-18 16:15 2024-08-12 Show GitHub Exploit DB Packet Storm
319775 6.7 MEDIUM
Local
microsoft windows_10_1507
windows_10_1809
windows_server_2019
windows_server_2022
windows_11_21h2
windows_10_21h2
windows_11_22h2
windows_10_22h2
windows_11_23h2
windows_server_2022_…
Summary: Microsoft was notified that an elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security (VBS), including a subset of Azure Virtual Machin… NVD-CWE-Other
CVE-2024-21302 2024-09-18 09:15 2024-08-8 Show GitHub Exploit DB Packet Storm
319776 7.5 HIGH
Network
containers aardvark-dns A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open… NVD-CWE-noinfo
CVE-2024-8418 2024-09-18 05:15 2024-09-5 Show GitHub Exploit DB Packet Storm
319777 4.3 MEDIUM
Network
imagerecycle imagerecycle_pdf_\&_image_compression The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.14. This is due to missing or incorrect nonce valid… CWE-352
 Origin Validation Error
CVE-2024-8120 2024-09-18 05:07 2024-08-24 Show GitHub Exploit DB Packet Storm
319778 4.8 MEDIUM
Network
cleversoft clever_addons_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CleverSoft Clever Addons for Elementor allows Stored XSS.This issue affects Clever Addons … CWE-79
Cross-site Scripting
CVE-2024-43324 2024-09-18 05:04 2024-08-18 Show GitHub Exploit DB Packet Storm
319779 6.1 MEDIUM
Network
orbisius child_theme_creator Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.This issue affects Chil… CWE-79
Cross-site Scripting
CVE-2024-43276 2024-09-18 05:00 2024-08-18 Show GitHub Exploit DB Packet Storm
319780 5.4 MEDIUM
Network
cpothemes allegiant Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a thro… CWE-79
Cross-site Scripting
CVE-2024-43329 2024-09-18 04:59 2024-08-18 Show GitHub Exploit DB Packet Storm