Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230971 8.8 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3590 2013-02-6 16:53 2012-07-25 Show GitHub Exploit DB Packet Storm
230972 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0683 2013-02-6 16:42 2012-07-25 Show GitHub Exploit DB Packet Storm
230973 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0682 2013-02-6 16:39 2012-07-25 Show GitHub Exploit DB Packet Storm
230974 6.8 警告 日立 - 日立 Cosminexus の運用管理機能におけるユーザ認証の脆弱性 CWE-287
不適切な認証 		- 2013-02-6 16:37 2013-01-28 Show GitHub Exploit DB Packet Storm
230975 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3701 2013-02-6 15:39 2012-09-13 Show GitHub Exploit DB Packet Storm
230976 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3687 2013-02-6 15:38 2012-09-13 Show GitHub Exploit DB Packet Storm
230977 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3632 2013-02-6 15:36 2012-09-13 Show GitHub Exploit DB Packet Storm
230978 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3621 2013-02-6 15:34 2012-09-13 Show GitHub Exploit DB Packet Storm
230979 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3607 2013-02-6 15:32 2012-09-13 Show GitHub Exploit DB Packet Storm
230980 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3606 2013-02-6 15:30 2012-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221 5.9 MEDIUM
Network 		- - LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private … New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-57943 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
222 5.3 MEDIUM
Network 		- - LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof client IP addresses by… New CWE-348
 Use of Less Trusted Source 		CVE-2026-57942 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
223 10.0 CRITICAL
Network 		- - Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue affects OMGF Pro: from n/a through 5.2.6. New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-57700 2026-06-30 03:16 2026-06-26 Show GitHub Exploit DB Packet Storm
224 6.5 MEDIUM
Network 		- - Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-o… New CWE-522
 Insufficiently Protected Credentials 		CVE-2026-56783 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
225 9.8 CRITICAL
Network 		- - Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-56782 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
226 5.3 MEDIUM
Network 		- - Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projectio… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-56781 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
227 7.5 HIGH
Network 		- - Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/password/ endpoint that allows domain administrators to change any user's password. At… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-56780 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
228 8.6 HIGH
Network 		- - Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute valid HMACs for arbit… New CWE-918
CWE-1188
Server-Side Request Forgery (SSRF) 
 Insecure Default Initialization of Resource 		CVE-2026-56285 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
229 7.1 HIGH
Network 		- - Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions. New CWE-79
Cross-site Scripting 		CVE-2026-56051 2026-06-30 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
230 9.8 CRITICAL
Network 		- - Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 versions. New CWE-266
 Incorrect Privilege Assignment 		CVE-2026-56028 2026-06-30 03:16 2026-06-27 Show GitHub Exploit DB Packet Storm