Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2621	8.8	重要 Network	pgAdmin Project	pgAdmin 4	pgAdmin ProjectのpgAdmin 4におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-7815	2026-05-28 14:38	2026-05-11	Show	GitHub Exploit DB Packet Storm

2622	8.8	重要 Network	pgAdmin Project	pgAdmin 4	pgAdmin ProjectのpgAdmin 4におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-7816	2026-05-28 14:38	2026-05-11	Show	GitHub Exploit DB Packet Storm

2623	6.5	警告 Network	pgAdmin Project	pgAdmin 4	pgAdmin ProjectのpgAdmin 4における外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-7817	2026-05-28 14:38	2026-05-11	Show	GitHub Exploit DB Packet Storm

2624	7.8	重要 Local	pgAdmin Project	pgAdmin 4	pgAdmin ProjectのpgAdmin 4における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-7818	2026-05-28 14:38	2026-05-11	Show	GitHub Exploit DB Packet Storm

2625	8.1	重要 Network	pgAdmin Project	pgAdmin 4	pgAdmin ProjectのpgAdmin 4におけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-7819	2026-05-28 14:38	2026-05-11	Show	GitHub Exploit DB Packet Storm

2626	6.5	警告 Network	pgAdmin Project	pgAdmin 4	pgAdmin ProjectのpgAdmin 4における過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-7820	2026-05-28 14:38	2026-05-11	Show	GitHub Exploit DB Packet Storm

2627	5.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-7879	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

2628	4.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-7881	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

2629	4.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-7882	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

2630	4.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-7886	2026-05-28 14:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319721	9.8	CRITICAL Network	tenda	ac15_firmware	Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request.	CWE-77 Command Injection	CVE-2023-36103	2024-09-25 03:10	2024-09-11	Show	GitHub Exploit DB Packet Storm

319722	4.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project	CWE-863 Incorrect Authorization	CVE-2024-47159	2024-09-25 03:09	2024-09-20	Show	GitHub Exploit DB Packet Storm

319723	7.8	HIGH Local	samsung	exynos_1480_firmware exynos_2400_firmware	An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free.	CWE-416 Use After Free	CVE-2024-31960	2024-09-25 03:08	2024-09-11	Show	GitHub Exploit DB Packet Storm

319724	5.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible	CWE-863 Incorrect Authorization	CVE-2024-47160	2024-09-25 03:03	2024-09-20	Show	GitHub Exploit DB Packet Storm

319725	5.5	MEDIUM Local	apple	macos	An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.	NVD-CWE-noinfo	CVE-2024-44186	2024-09-25 03:03	2024-09-17	Show	GitHub Exploit DB Packet Storm

319726	5.5	MEDIUM Local	apple	macos	A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read arbitrary files.	CWE-22 Path Traversal	CVE-2024-44190	2024-09-25 03:02	2024-09-17	Show	GitHub Exploit DB Packet Storm

319727	5.3	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page	CWE-522 Insufficiently Protected Credentials	CVE-2024-47162	2024-09-25 02:57	2024-09-20	Show	GitHub Exploit DB Packet Storm

319728	9.8	CRITICAL Network	pharmacy_management_system_project	pharmacy_management_system	A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php?action=editSalesman. The mani…	CWE-89 SQL Injection	CVE-2024-8146	2024-09-25 02:00	2024-08-25	Show	GitHub Exploit DB Packet Storm

319729	5.5	MEDIUM Local	apple	macos	This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access sensitive data …	NVD-CWE-noinfo	CVE-2024-44182	2024-09-25 01:52	2024-09-17	Show	GitHub Exploit DB Packet Storm

319730	6.1	MEDIUM Network	gitlab	gitlab	An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability …	CWE-601 Open Redirect	CVE-2024-4283	2024-09-25 01:51	2024-09-17	Show	GitHub Exploit DB Packet Storm