Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227131 2.1 注意 Linux - Linux Kernel の kernel/signal.c における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2013-2141 2013-11-20 18:03 2013-04-25 Show GitHub Exploit DB Packet Storm
227132 6.4 警告 レッドハット - Red Hat JBoss Enterprise Application Platform におけるセッションをハイジャックされる脆弱性 CWE-16
環境設定
CVE-2013-4128 2013-11-20 17:36 2013-08-12 Show GitHub Exploit DB Packet Storm
227133 7.2 危険 VMware - Linux 上で稼働する VMware Workstation および VMware Player におけるホスト OS の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5972 2013-11-20 17:14 2013-11-14 Show GitHub Exploit DB Packet Storm
227134 5.8 警告 Google - Google Chrome におけるサンドボックスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6802 2013-11-20 16:56 2013-11-14 Show GitHub Exploit DB Packet Storm
227135 4.3 警告 Percipient Studios - Umbraco CMS 用 Percipient Studios ImageGen の imagegen.ashx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0741 2013-11-20 16:46 2013-10-31 Show GitHub Exploit DB Packet Storm
227136 3.5 注意 D-Link Systems, Inc. - D-Link DSL-2760U ゲートウェイにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5223 2013-11-20 15:18 2013-11-12 Show GitHub Exploit DB Packet Storm
227137 7.6 危険 D-Link Systems, Inc. - D-Link DSL-2740B ゲートウェイのファームウェアにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2271 2013-11-20 15:18 2013-11-14 Show GitHub Exploit DB Packet Storm
227138 6.8 警告 Sunil Nanda - WordPress 用 Blue Wrench Video Widget プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6797 2013-11-20 15:01 2013-10-23 Show GitHub Exploit DB Packet Storm
227139 4.3 警告 Softaculous - Softaculous Webuzo の File Manager モジュールの filemanager/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6042 2013-11-20 14:34 2013-10-3 Show GitHub Exploit DB Packet Storm
227140 4.3 警告 Beanbag - Review Board におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4519 2013-11-20 14:21 2013-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1381 5.4 MEDIUM
Network
jenkins assembla A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and pa… CWE-862
 Missing Authorization
CVE-2026-57304 2026-06-26 03:46 2026-06-24 Show GitHub Exploit DB Packet Storm
1382 7.1 HIGH
Network
jenkins assembla Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla ser… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-57303 2026-06-26 03:45 2026-06-24 Show GitHub Exploit DB Packet Storm
1383 7.5 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompre… CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-54314 2026-06-26 03:42 2026-06-24 Show GitHub Exploit DB Packet Storm
1384 7.7 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace opera… CWE-89
SQL Injection
CVE-2026-54313 2026-06-26 03:42 2026-06-24 Show GitHub Exploit DB Packet Storm
1385 8.5 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-54312 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1386 7.7 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used by the Merge node's … CWE-488
 Exposure of Data Element to Wrong Session
CVE-2026-54311 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1387 9.9 CRITICAL
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleD… CWE-89
SQL Injection
CVE-2026-54310 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1388 10.0 CRITICAL
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint accepts session initialization and tool invocatio… CWE-306
Missing Authentication for Critical Function
CVE-2026-54309 2026-06-26 03:40 2026-06-24 Show GitHub Exploit DB Packet Storm
1389 5.4 MEDIUM
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response without sanitization o… CWE-79
Cross-site Scripting
CVE-2026-54303 2026-06-26 03:39 2026-06-24 Show GitHub Exploit DB Packet Storm
1390 5.5 MEDIUM
Local
nuxt nuxt Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to an abstract-namespace Unix socket without permission restr… CWE-276
Incorrect Default Permissions 
CVE-2026-56301 2026-06-26 03:39 2026-06-23 Show GitHub Exploit DB Packet Storm