Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2291	7.5	重要 Network	ImageMagick	ImageMagick	ImageMagickにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-53460	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

2292	7.5	重要 Network	ImageMagick	ImageMagick	ImageMagickにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-53461	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

2293	5.9	警告 Network	ImageMagick	ImageMagick	ImageMagickにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-53462	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

2294	4.3	警告 Network	ImageMagick	ImageMagick	ImageMagickにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-53463	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

2295	4	警告 Local	ImageMagick	ImageMagick	ImageMagickにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-53464	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

2296	6.2	警告 Local	ImageMagick	ImageMagick	ImageMagickにおける複数の脆弱性	CWE-122 CWE-787	CVE-2026-53465	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

2297	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-6277	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

2298	8.7	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-6552	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

2299	3.7	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-6976	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

2300	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-7250	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
611	7.5	HIGH Network	jetbrains	youtrack	In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings Update	CWE-862 Missing Authorization	CVE-2026-57923	2026-06-28 04:32	2026-06-26	Show	GitHub Exploit DB Packet Storm

612	5.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details Update	CWE-276 Incorrect Default Permissions	CVE-2026-57924	2026-06-28 04:31	2026-06-26	Show	GitHub Exploit DB Packet Storm

613	5.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags Update	CWE-862 Missing Authorization	CVE-2026-57925	2026-06-28 04:29	2026-06-26	Show	GitHub Exploit DB Packet Storm

614	7.5	HIGH Network	jenkins	script_security	Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scri… Update	CWE-93 CWE-693 CRLF Injection Protection Mechanism Failure	CVE-2026-57281	2026-06-28 04:27	2026-06-24	Show	GitHub Exploit DB Packet Storm

615	6.5	MEDIUM Network	gnu	sed	Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation. Update	CWE-22 CWE-200 Path Traversal Information Exposure	CVE-2026-9153	2026-06-28 04:26	2026-06-25	Show	GitHub Exploit DB Packet Storm

616	6.5	MEDIUM Network	gnu	sed	Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression paramete… Update	CWE-22 Path Traversal	CVE-2026-9154	2026-06-28 04:25	2026-06-25	Show	GitHub Exploit DB Packet Storm

617	8.8	HIGH Network	gnu	sed	OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input … Update	CWE-78 OS Command	CVE-2026-9155	2026-06-28 04:24	2026-06-25	Show	GitHub Exploit DB Packet Storm

618	7.2	HIGH Network	aten	unizon	ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… Update	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-9779	2026-06-28 04:02	2026-06-25	Show	GitHub Exploit DB Packet Storm

619	7.2	HIGH Network	aten	unizon	ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Au… Update	CWE-22 Path Traversal	CVE-2026-9778	2026-06-28 04:01	2026-06-25	Show	GitHub Exploit DB Packet Storm

620	7.2	HIGH Network	aten	unizon	ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentic… Update	CWE-22 Path Traversal	CVE-2026-9777	2026-06-28 04:01	2026-06-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed