Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
311 7.5 重要
Network 		ImageMagick ImageMagick ImageMagickにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-56368 2026-06-29 11:10 2026-06-24 Show GitHub Exploit DB Packet Storm
312 7.8 重要
Local 		ImageMagick ImageMagick ImageMagickにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-56370 2026-06-29 11:10 2026-06-24 Show GitHub Exploit DB Packet Storm
313 8.2 重要
Network 		ImageMagick ImageMagick ImageMagickにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-56378 2026-06-29 11:09 2026-06-21 Show GitHub Exploit DB Packet Storm
314 8.8 重要
Network 		MISP project Malware Information Sharing Platform (MISP) MISP projectのMalware Information Sharing Platform (MISP)におけるセッションの固定化の脆弱性 New CWE-384
セッションの固定化 		CVE-2026-56425 2026-06-29 11:09 2026-06-22 Show GitHub Exploit DB Packet Storm
315 4.3 警告
Network 		hono hono honoにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-56761 2026-06-29 11:09 2026-06-24 Show GitHub Exploit DB Packet Storm
316 8.8 重要
Network 		Jenkins プロジェクト Script Security JenkinsのScript Securityにおける保護メカニズムの不具合に関する脆弱性 New CWE-693
保護メカニズムの不具合 		CVE-2026-57280 2026-06-29 11:09 2026-06-24 Show GitHub Exploit DB Packet Storm
317 5 警告
Network 		Jenkins プロジェクト Git Client JenkinsのGit ClientにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-57282 2026-06-29 11:09 2026-06-24 Show GitHub Exploit DB Packet Storm
318 4.3 警告
Network 		Jenkins プロジェクト pipeline: groovy Jenkinsのpipeline: groovyにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-57283 2026-06-29 11:09 2026-06-24 Show GitHub Exploit DB Packet Storm
319 4.3 警告
Network 		Jenkins プロジェクト pipeline: groovy Jenkinsのpipeline: groovyにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 New CWE-470
クラスまたはコードを選択する外部から制御された入力の使用 		CVE-2026-57284 2026-06-29 11:09 2026-06-24 Show GitHub Exploit DB Packet Storm
320 4.3 警告
Network 		Jenkins プロジェクト GitHub Branch Source JenkinsのGitHub Branch Sourceにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-57285 2026-06-29 11:09 2026-06-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
190651 6.1 MEDIUM
Network 		miraheze globalnewfiles GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column of the GlobalNewFiles special page is vulnerable t… - CVE-2021-39186 2024-11-21 15:18 2021-09-2 Show GitHub Exploit DB Packet Storm
190652 9.1 CRITICAL
Network 		typelevel http4s Http4s is a minimal, idiomatic Scala interface for HTTP services. In http4s versions 0.21.26 and prior, 0.22.0 through 0.22.2, 0.23.0, 0.23.1, and 1.0.0-M1 through 1.0.0-M24, the default CORS configu… - CVE-2021-39185 2024-11-21 15:18 2021-09-2 Show GitHub Exploit DB Packet Storm
190653 8.8 HIGH
Network 		frentix openolat OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared import XML file (e.g. a course) any class on the Java classpath can be instant… - CVE-2021-39181 2024-11-21 15:18 2021-09-2 Show GitHub Exploit DB Packet Storm
190654 5.4 MEDIUM
Network 		pimcore pimcore Pimcore is an open source data & experience management platform. Prior to version 10.1.2, an authenticated user could add XSS code as a value of custom metadata on assets. There is a patch for this i… CWE-79
Cross-site Scripting 		CVE-2021-39170 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190655 5.4 MEDIUM
Network 		pimcore pimcore Pimcore is an open source data & experience management platform. Prior to version 10.1.2, text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticate… - CVE-2021-39166 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190656 7.5 HIGH
Network 		atlassian atlasboard The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability. CWE-22
Path Traversal 		CVE-2021-39109 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190657 8.8 HIGH
Network 		frentix openolat OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.3.18, 15.5.3, and 16.0.0. Using a specially prepared ZIP file, it is possible t… CWE-22
Path Traversal 		CVE-2021-39180 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190658 7.5 HIGH
Network 		detect-character-encoding_project detect-character-encoding detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in d… - CVE-2021-39176 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190659 3.1 LOW
Network 		matrix
fedoraproject 		synapse
fedora 		Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) o… - CVE-2021-39164 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm
190660 7.8 HIGH
Local 		npmjs
oracle
siemens 		arborist
graalvm
sinec_infrastructure_network_services 		`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts … - CVE-2021-39135 2024-11-21 15:18 2021-09-1 Show GitHub Exploit DB Packet Storm