Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243521 6.4 警告 mentiss acgv - ACGVannu の index2.php におけるパスワードなどを変更される脆弱性 - CVE-2007-0697 2012-09-25 16:47 2007-02-3 Show GitHub Exploit DB Packet Storm
243522 5 警告 myevent - myEvent における重要な情報を取得される脆弱性 - CVE-2007-0690 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
243523 5 警告 MyBB Group - MyBB における重要な情報を取得される脆弱性 - CVE-2007-0689 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
243524 7.5 危険 hunkaray duyuru - Hunkaray Duyuru Scripti における SQL インジェクションの脆弱性 - CVE-2007-0688 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
243525 6.5 警告 michelle - Michelle's L2J Dropcalc の i-search.php における SQL インジェクションの脆弱性 - CVE-2007-0687 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
243526 7.1 危険 インテル - w29n51.sys におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0686 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
243527 2.6 注意 マイクロソフト - Windows Mobile 5.0 などで稼働する Internet Explorer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0685 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
243528 7.5 危険 omegaboard - Omegaboard の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0683 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
243529 7.5 危険 jv2 - JV2 Folder Gallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0682 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
243530 7.5 危険 nicolas grandjean - Nicolas Grandjean PHPMyRing における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0679 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2171 7.8 HIGH
Local 		kovidgoyal kitty Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, a program able to write bytes to a kitty terminal — a remote SSH peer, a downloaded file viewed with `cat`, a log line, an e… CWE-94
CWE-862
Code Injection
 Missing Authorization 		CVE-2026-42851 2026-06-17 01:07 2026-06-13 Show GitHub Exploit DB Packet Storm
2172 5.0 MEDIUM
Local 		kovidgoyal kitty Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child process running in the… CWE-59
CWE-367
CWE-426
Link Following
 Time-of-check Time-of-use (TOCTOU) Race Condition
 Untrusted Search Path 		CVE-2026-54055 2026-06-17 01:02 2026-06-13 Show GitHub Exploit DB Packet Storm
2173 7.1 HIGH
Network 		kovidgoyal kitty Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0.47.1, `kitten dnd` can allow a malicious remote drag-and-drop source to overwrite or truncate arbitrary files writable by the lo… CWE-59
Link Following 		CVE-2026-54056 2026-06-17 00:59 2026-06-13 Show GitHub Exploit DB Packet Storm
2174 - - - AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCP_HTTP=1. In that mode,… CWE-306
Missing Authentication for Critical Function 		CVE-2026-50287 2026-06-17 00:51 2026-06-13 Show GitHub Exploit DB Packet Storm
2175 8.8 HIGH
Network 		- - A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL co… CWE-89
SQL Injection 		CVE-2026-36670 2026-06-17 00:51 2026-06-16 Show GitHub Exploit DB Packet Storm
2176 6.8 MEDIUM
Network 		- - In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentia… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2026-54421 2026-06-17 00:51 2026-06-14 Show GitHub Exploit DB Packet Storm
2177 7.5 HIGH
Network 		- - Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a remote Collection co… CWE-345
CWE-863
 Insufficient Verification of Data Authenticity
 Incorrect Authorization 		CVE-2026-47777 2026-06-17 00:51 2026-06-16 Show GitHub Exploit DB Packet Storm
2178 6.1 MEDIUM
Network 		- - Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. Versions 3.6.3 and prior are vulnerable to reflected cross-site scripting (XSS) due to improper n… CWE-79
Cross-site Scripting 		CVE-2026-49294 2026-06-17 00:51 2026-06-16 Show GitHub Exploit DB Packet Storm
2179 7.8 HIGH
Local 		- - A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code via embedding shell metacharacters. CWE-77
Command Injection 		CVE-2025-56814 2026-06-17 00:51 2026-06-16 Show GitHub Exploit DB Packet Storm
2180 8.0 HIGH
Network 		- - An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. The vulnerability allows untrusted applications (with no permissions) to force a… CWE-926
 Improper Export of Android Application Components 		CVE-2025-68713 2026-06-17 00:51 2026-06-16 Show GitHub Exploit DB Packet Storm