Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 5.5 警告
Network 		Grokability, Inc. Snipe-IT Grokability, Inc.のSnipe-ITにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-48493 2026-06-29 11:16 2026-06-23 Show GitHub Exploit DB Packet Storm
202 9.6 緊急
Network 		langflow langflow langflowにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-48519 2026-06-29 11:16 2026-06-23 Show GitHub Exploit DB Packet Storm
203 6.1 警告
Network 		langflow langflow langflowにおけるファイル名やパス名の外部制御に関する脆弱性 New CWE-73
ファイル名やパス名の外部制御 		CVE-2026-48520 2026-06-29 11:15 2026-06-23 Show GitHub Exploit DB Packet Storm
204 7.5 重要
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 New CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2026-48615 2026-06-29 11:15 2026-06-26 Show GitHub Exploit DB Packet Storm
205 6.5 警告
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおけるUnicode エンコーディングの処理に関する脆弱性 New CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-48618 2026-06-29 11:15 2026-06-26 Show GitHub Exploit DB Packet Storm
206 7.5 重要
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-48619 2026-06-29 11:15 2026-06-26 Show GitHub Exploit DB Packet Storm
207 7.5 重要
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-48712 2026-06-29 11:15 2026-06-22 Show GitHub Exploit DB Packet Storm
208 5.3 警告
Network 		Encode Starlette EncodeのStarletteにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 New CWE-470
クラスまたはコードを選択する外部から制御された入力の使用 		CVE-2026-48817 2026-06-29 11:15 2026-06-17 Show GitHub Exploit DB Packet Storm
209 7.5 重要
Network 		Encode Starlette EncodeのStarletteにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-48818 2026-06-29 11:15 2026-06-17 Show GitHub Exploit DB Packet Storm
210 5.4 警告
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-48928 2026-06-29 11:15 2026-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4161 8.1 HIGH
Network 		- - Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated… CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2026-41717 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4162 7.5 HIGH
Network 		- - Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. Affected versions: Spring Da… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41716 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4163 4.0 MEDIUM
Network 		- - Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also calling setUseSSL(true) get TLS encryption with no certificate validation and no… CWE-295
Improper Certificate Validation  		CVE-2026-41714 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4164 5.9 MEDIUM
Network 		- - Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: Spring Data Commons … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-41711 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4165 6.1 MEDIUM
Network 		- - Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after… CWE-601
Open Redirect 		CVE-2026-41706 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4166 4.4 MEDIUM
Network 		- - Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.… CWE-330
 Use of Insufficiently Random Values 		CVE-2026-41701 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4167 4.8 MEDIUM
Network 		- - Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). An attacker can sup… CWE-943
 Improper Neutralization of Special Elements in Data Query Logic 		CVE-2026-41697 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4168 5.9 MEDIUM
Network 		- - Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to … CWE-943
 Improper Neutralization of Special Elements in Data Query Logic 		CVE-2026-41696 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4169 7.5 HIGH
Network 		- - Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolutio… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-41695 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
4170 6.1 MEDIUM
Network 		- - Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an inva… CWE-601
Open Redirect 		CVE-2026-41008 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm