Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2361	7.5	重要 Network	Jenkins プロジェクト	Credentials Binding	JenkinsのCredentials Bindingにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-48922	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

2362	4.3	警告 Network	Jenkins プロジェクト	AppSpider	JenkinsのAppSpiderにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-48923	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

2363	4.3	警告 Network	Jenkins プロジェクト	Bitbucket OAuth	JenkinsのBitbucket OAuthにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-48924	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

2364	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-5272	2026-06-3 15:34	2026-04-1	Show	GitHub Exploit DB Packet Storm

2365	5.5	警告 Local	IBM	IBM App Connect Enterprise	IBMのIBM App Connect Enterpriseにおける重要な情報のセキュアでない格納に関する脆弱性	CWE-922 重要な情報のセキュアでない格納	CVE-2026-5515	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

2366	8.8	重要 Network	Agilonhealth (MphRx)	Minerva	Agilonhealth (MphRx)のMinervaにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-5781	2026-06-3 15:34	2026-04-28	Show	GitHub Exploit DB Packet Storm

2367	7.5	重要 Network	IBM	IBM DB2	IBMのIBM DB2におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-6051	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

2368	7.5	重要 Network	IBM	IBM DB2	IBMのIBM DB2におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-6052	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

2369	5.5	警告 Local	IBM	IBM DB2	IBMのIBM DB2における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-6053	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

2370	7.5	重要 Network	IBM	IBM DB2	IBMのIBM DB2における認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-6938	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319701	9.8	CRITICAL Network	ivanti	virtual_traffic_management	Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.	CWE-287 Improper Authentication	CVE-2024-7593	2024-09-25 10:00	2024-08-14	Show	GitHub Exploit DB Packet Storm

319702	5.5	MEDIUM Local	apple	macos	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.	CWE-281 Improper Preservation of Permissions	CVE-2024-44188	2024-09-25 05:38	2024-09-17	Show	GitHub Exploit DB Packet Storm

319703	5.5	MEDIUM Local	apple	macos	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data.	CWE-281 Improper Preservation of Permissions	CVE-2024-40859	2024-09-25 05:31	2024-09-17	Show	GitHub Exploit DB Packet Storm

319704	7.5	HIGH Network	zitadel	zitadel	Zitadel is an open source identity management platform. ZITADEL's user account deactivation mechanism did not work correctly with service accounts. Deactivated service accounts retained the ability t…	NVD-CWE-noinfo	CVE-2024-47000	2024-09-25 05:25	2024-09-20	Show	GitHub Exploit DB Packet Storm

319705	6.5	MEDIUM Network	zitadel	zitadel	Zitadel is an open source identity management platform. ZITADEL's user grants deactivation mechanism did not work correctly. Deactivated user grants were still provided in token, which could lead to …	NVD-CWE-noinfo	CVE-2024-46999	2024-09-25 05:20	2024-09-20	Show	GitHub Exploit DB Packet Storm

319706	7.5	HIGH Network	envoyproxy	envoy	Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear route cache with remote JWKs. In the following case: 1. remote JWKs are used, whi…	CWE-476 NULL Pointer Dereference	CVE-2024-45809	2024-09-25 05:12	2024-09-20	Show	GitHub Exploit DB Packet Storm

319707	7.5	HIGH Network	envoyproxy	envoy	Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handling `sendLocalReply` under some circumstance, e.g., websocket upgrade, and requ…	NVD-CWE-noinfo	CVE-2024-45810	2024-09-25 04:48	2024-09-20	Show	GitHub Exploit DB Packet Storm

319708	4.8	MEDIUM Network	mage-people	bus_ticket_booking_with_seat_reservation	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affe…	CWE-79 Cross-site Scripting	CVE-2024-43985	2024-09-25 04:33	2024-09-18	Show	GitHub Exploit DB Packet Storm

319709	6.1	MEDIUM Network	couchbase	couchbase_server	Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection.	CWE-74 Injection	CVE-2024-25673	2024-09-25 04:08	2024-09-20	Show	GitHub Exploit DB Packet Storm

319710	5.5	MEDIUM Local	apple	macos ipados iphone_os visionos tvos watchos	A logic error was addressed with improved error handling. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS So…	NVD-CWE-noinfo	CVE-2024-44183	2024-09-25 04:04	2024-09-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed