Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1601 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-10702 2026-06-8 11:48 2026-06-2 Show GitHub Exploit DB Packet Storm
1602 3.6 低
Local 		lfprojects mlflow lfprojectsのmlflowにおける複数の脆弱性 CWE-327
CWE-328
CVE-2026-10803 2026-06-8 11:48 2026-06-4 Show GitHub Exploit DB Packet Storm
1603 6.5 警告
Adjacent 		TP-LINK Technologies tapo c200 ファームウェア TP-LINK Technologiesのtapo c200 ファームウェアにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-1871 2026-06-8 11:48 2026-06-2 Show GitHub Exploit DB Packet Storm
1604 6.5 警告
Network 		Koha Koha Kohaにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-26379 2026-06-8 11:48 2026-06-3 Show GitHub Exploit DB Packet Storm
1605 9 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-2651 2026-06-8 11:48 2026-05-25 Show GitHub Exploit DB Packet Storm
1606 6.5 警告
Network 		libxls project libxls libxls projectのlibxlsにおける初期化されていない変数の使用に関する脆弱性 CWE-457
初期化されていない変数の使用 		CVE-2026-26824 2026-06-8 11:48 2026-06-3 Show GitHub Exploit DB Packet Storm
1607 5.3 警告
Network 		libxls project libxls libxls projectのlibxlsにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-26825 2026-06-8 11:48 2026-06-3 Show GitHub Exploit DB Packet Storm
1608 7.5 重要
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-28299 2026-06-8 11:47 2026-06-2 Show GitHub Exploit DB Packet Storm
1609 7.5 重要
Network 		SolarWinds Serv-U SolarWindsのServ-Uにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-28318 2026-06-8 11:47 2026-06-4 Show GitHub Exploit DB Packet Storm
1610 7.1 重要
Network 		librechat librechat LibreChatにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-31942 2026-06-8 11:47 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 6.5 MEDIUM
Network 		mongodb mongodb The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechani… Update CWE-617
 Reachable Assertion 		CVE-2026-9748 2026-06-16 02:10 2026-06-10 Show GitHub Exploit DB Packet Storm
62 6.5 MEDIUM
Network 		mongodb mongodb An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in… Update CWE-617
 Reachable Assertion 		CVE-2026-9750 2026-06-16 02:10 2026-06-10 Show GitHub Exploit DB Packet Storm
63 7.5 HIGH
Network 		image-size image-size image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-… Update CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-71329 2026-06-16 02:09 2026-06-10 Show GitHub Exploit DB Packet Storm
64 8.8 HIGH
Network 		splunk splunk
splunk_cloud_platform
splunk_secure_gateway 		In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway vers… Update CWE-502
 Deserialization of Untrusted Data 		CVE-2026-20251 2026-06-16 02:08 2026-06-11 Show GitHub Exploit DB Packet Storm
65 7.5 HIGH
Network 		image-size image-size image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attack… Update CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2025-71330 2026-06-16 02:00 2026-06-10 Show GitHub Exploit DB Packet Storm
66 6.5 MEDIUM
Network 		mongodb mongodb Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server. Update CWE-617
 Reachable Assertion 		CVE-2026-9747 2026-06-16 01:58 2026-06-10 Show GitHub Exploit DB Packet Storm
67 6.5 MEDIUM
Network 		mongodb mongodb In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may derefe… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-9743 2026-06-16 01:56 2026-06-10 Show GitHub Exploit DB Packet Storm
68 7.5 HIGH
Network 		mongodb mongodb A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain n… Update CWE-674
 Uncontrolled Recursion 		CVE-2026-9740 2026-06-16 01:55 2026-06-10 Show GitHub Exploit DB Packet Storm
69 7.6 HIGH
Network 		splunk splunk
splunk_cloud_platform 		In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privile… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-20252 2026-06-16 01:51 2026-06-11 Show GitHub Exploit DB Packet Storm
70 5.5 MEDIUM
Local 		mongodb mongodb MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parame… Update CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-9735 2026-06-16 01:46 2026-06-10 Show GitHub Exploit DB Packet Storm