Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2361 8.8 重要
Network 		Jenkins プロジェクト Email Extension Plugin JenkinsのEmail Extension Pluginにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-48920 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2362 7.5 重要
Network 		Jenkins プロジェクト Credentials Binding JenkinsのCredentials Bindingにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-48922 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2363 4.3 警告
Network 		Jenkins プロジェクト AppSpider JenkinsのAppSpiderにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-48923 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2364 4.3 警告
Network 		Jenkins プロジェクト Bitbucket OAuth JenkinsのBitbucket OAuthにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-48924 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2365 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-5272 2026-06-3 15:34 2026-04-1 Show GitHub Exploit DB Packet Storm
2366 5.5 警告
Local 		IBM IBM App Connect Enterprise IBMのIBM App Connect Enterpriseにおける重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2026-5515 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2367 8.8 重要
Network 		Agilonhealth (MphRx) Minerva Agilonhealth (MphRx)のMinervaにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-5781 2026-06-3 15:34 2026-04-28 Show GitHub Exploit DB Packet Storm
2368 7.5 重要
Network 		IBM IBM DB2 IBMのIBM DB2におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6051 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2369 7.5 重要
Network 		IBM IBM DB2 IBMのIBM DB2におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6052 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2370 5.5 警告
Local 		IBM IBM DB2 IBMのIBM DB2における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-6053 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3491 4.3 MEDIUM
Network 		- - A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component … CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-10215 2026-06-4 04:16 2026-06-1 Show GitHub Exploit DB Packet Storm
3492 8.8 HIGH
Network 		- - A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetProtocolFilter of the file /goform/formSetProtocolFilter. Such manipulation of the argument protocol_na… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-10122 2026-06-4 04:16 2026-05-31 Show GitHub Exploit DB Packet Storm
3493 4.3 MEDIUM
Network 		- - A vulnerability was identified in Open5GS up to 2.7.7. This affects an unknown part in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. Such manipulation leads to denial … CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-10115 2026-06-4 04:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3494 7.5 HIGH
Network 		oracle database_server Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with n… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46835 2026-06-4 04:00 2026-05-29 Show GitHub Exploit DB Packet Storm
3495 7.5 HIGH
Network 		oracle database_server Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with n… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46834 2026-06-4 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
3496 9.9 CRITICAL
Network 		linuxfoundation cloudnativepg CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as t… CWE-250
CWE-271
CWE-426
 Execution with Unnecessary Privileges
 Privilege Dropping / Lowering Errors
 Untrusted Search Path 		CVE-2026-44477 2026-06-4 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
3497 8.0 HIGH
Network 		microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-78
OS Command  		CVE-2026-47294 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
3498 6.3 MEDIUM
Network 		vivotek fd8136_firmware A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST… CWE-121
Stack-based Buffer Overflow 		CVE-2026-35717 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
3499 7.3 HIGH
Network 		vivotek fd8136_firmware Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component CWE-121
Stack-based Buffer Overflow 		CVE-2026-30649 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
3500 8.8 HIGH
Network 		vivotek fd8136_firmware A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-03… CWE-120
Classic Buffer Overflow 		CVE-2026-30650 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm