Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
21 8.1 重要
Network 		Stichting NLnet Labs NSD NLnet LabsのNSDにおける複数の脆弱性 New CWE-120
CWE-20
CVE-2026-12246 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
22 6.1 警告
Network 		PowerSchool Inc. Employee Access Center PowerSchool Inc.のEmployee Access Centerにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-12425 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
23 7.5 重要
Network 		Stichting NLnet Labs NSD NLnet LabsのNSDにおける複数の脆弱性 New CWE-284
CWE-306
CVE-2026-12490 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
24 7.1 重要
Local 		シーメンス SIMATIC WinCC Unified PC Runtime シーメンスのSIMATIC WinCC Unified PC Runtimeにおけるファイル内またはディスク上の平文保存に関する脆弱性 New CWE-313
ファイル内またはディスク上の平文保存 		CVE-2026-24349 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
25 8.2 重要
Network 		Docling Docling Doclingにおける複数の脆弱性 New CWE-918
CWE-94
CVE-2026-44016 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
26 7.5 重要
Network 		Docling Docling Doclingにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-44017 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
27 7.5 重要
Network 		Docling Docling DoclingにおけるDTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 New CWE-776
DTD の再帰的なエンティティ参照の不適切な制限 		CVE-2026-44020 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
28 5.5 警告
Local 		Docling Docling Doclingにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-44022 2026-06-29 11:25 Show GitHub Exploit DB Packet Storm
29 8.8 重要
Network 		Dokku Dokku Dokkuにおけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題 		CVE-2026-45405 2026-06-29 11:24 Show GitHub Exploit DB Packet Storm
30 8.8 重要
Network 		Dokku Dokku DokkuにおけるEval インジェクションに関する脆弱性 New CWE-95
Evalインジェクション 		CVE-2026-45406 2026-06-29 11:24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254291 7.8 HIGH
Local 		7-zip 7-zip Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) … CWE-665
CWE-908
 Improper Initialization
 Use of Uninitialized Resource 		CVE-2018-10115 2024-11-21 12:40 2018-05-3 Show GitHub Exploit DB Packet Storm
254292 6.5 MEDIUM
Network 		libtiff libtiff ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c. CWE-476
 NULL Pointer Dereference 		CVE-2018-10126 2024-11-21 12:40 2018-04-22 Show GitHub Exploit DB Packet Storm
254293 6.5 MEDIUM
Network 		digitalguardian management_console Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue. CWE-22
Path Traversal 		CVE-2018-10176 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254294 6.5 MEDIUM
Network 		digitalguardian management_console Digital Guardian Management Console 7.1.2.0015 has an XXE issue. CWE-611
XXE 		CVE-2018-10175 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254295 6.5 MEDIUM
Network 		digitalguardian management_console Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. Thi… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-10174 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254296 8.8 HIGH
Network 		digitalguardian management_console Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-10173 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254297 7.8 HIGH
Local 		vertiv watchdog_console Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml. CWE-269
 Improper Privilege Management 		CVE-2018-10079 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254298 4.8 MEDIUM
Network 		vertiv watchdog_console Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description. CWE-79
Cross-site Scripting 		CVE-2018-10078 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254299 4.9 MEDIUM
Network 		vertiv watchdog_console XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data. CWE-611
XXE 		CVE-2018-10077 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254300 8.8 HIGH
Network 		phpmyadmin phpmyadmin phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php. CWE-352
 Origin Validation Error 		CVE-2018-10188 2024-11-21 12:40 2018-04-19 Show GitHub Exploit DB Packet Storm