Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1831 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-22893 2026-06-16 13:38 2026-06-10 Show GitHub Exploit DB Packet Storm
1832 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-24716 2026-06-16 13:38 2026-06-10 Show GitHub Exploit DB Packet Storm
1833 7.2 重要
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-24719 2026-06-16 13:38 2026-06-10 Show GitHub Exploit DB Packet Storm
1834 5.3 警告
Network 		NAVTOR AS NavBox Firmware NAVTOR ASのNavBox Firmwareにおけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2026-2752 2026-06-16 13:38 2026-03-6 Show GitHub Exploit DB Packet Storm
1835 7.5 重要
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34180 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1836 7.4 重要
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2026-34181 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1837 9.1 緊急
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2026-34182 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1838 7.5 重要
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける不適切に制御された順次メモリ割り当てに関する脆弱性 CWE-1325
不適切に制御された順次メモリ割り当て 		CVE-2026-34183 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1839 5.5 警告
Local 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-34657 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
1840 7.5 重要
Network 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-34711 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255001 7.8 HIGH
Local 		cisco energy_management_suite A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite (CEMS) could allow an authenticated, local attacker to access and alter confidential da… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-0468 2024-11-21 12:38 2018-12-5 Show GitHub Exploit DB Packet Storm
255002 6.1 MEDIUM
Network 		qnap qts Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote … CWE-79
Cross-site Scripting 		CVE-2018-0716 2024-11-21 12:38 2018-11-30 Show GitHub Exploit DB Packet Storm
255003 9.8 CRITICAL
Network 		qnap qts Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-0721 2024-11-21 12:38 2018-11-28 Show GitHub Exploit DB Packet Storm
255004 6.1 MEDIUM
Network 		qnap qts Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on b… CWE-79
Cross-site Scripting 		CVE-2018-0719 2024-11-21 12:38 2018-11-28 Show GitHub Exploit DB Packet Storm
255005 8.8 HIGH
Adjacent 		bluestacks bluestacks BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attacker on the same network segment to bypass access restriction… NVD-CWE-noinfo
CVE-2018-0701 2024-11-21 12:38 2018-11-16 Show GitHub Exploit DB Packet Storm
255006 7.5 HIGH
Network 		hyuki yukiwiki YukiWiki 2.1.3 and earlier does not process a particular request properly that may allow consumption of large amounts of CPU and memory resources and may result in causing a denial of service conditi… CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-0700 2024-11-21 12:38 2018-11-16 Show GitHub Exploit DB Packet Storm
255007 6.1 MEDIUM
Network 		hyuki yukiwiki Cross-site scripting vulnerability in YukiWiki 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2018-0699 2024-11-21 12:38 2018-11-16 Show GitHub Exploit DB Packet Storm
255008 6.1 MEDIUM
Network 		metabase metabase Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2018-0697 2024-11-21 12:38 2018-11-16 Show GitHub Exploit DB Packet Storm
255009 6.1 MEDIUM
Network 		usvn usvn Cross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2018-0695 2024-11-21 12:38 2018-11-16 Show GitHub Exploit DB Packet Storm
255010 9.8 CRITICAL
Network 		soliton filezen FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2018-0694 2024-11-21 12:38 2018-11-16 Show GitHub Exploit DB Packet Storm