Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3571 8.1 重要
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-44574 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3572 7.5 重要
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-44575 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3573 5.9 警告
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-44577 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3574 10 緊急
Network 		Peerigon angular-expressions Peerigonのangular-expressionsにおけるEval インジェクションに関する脆弱性 CWE-95
Evalインジェクション 		CVE-2026-44643 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3575 7.7 重要
Network 		Grav CMS grav Grav CMSのgravにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44738 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3576 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-44777 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3577 4.2 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44991 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3578 5 警告
Local 		OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避 		CVE-2026-44992 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3579 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-44993 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3580 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44994 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313211 - - - The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting (XSS) via the Where textbox on the Reports screen during new rule creation. - CVE-2024-23169 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313212 - - - Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being blocked by the files access control, the user would still be able to copy the inter… CWE-284
Improper Access Control 		CVE-2024-52514 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313213 - - - Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share link a malicious user was able to download attachments that are referenced in Tex… CWE-200
Information Exposure 		CVE-2024-52513 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313214 - - - user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the user to a provided URL after successfully authenticating. It … - CVE-2024-52512 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313215 - - - Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could blindly insert new rows into tables they have no ac… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-52511 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313216 - - - The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error but allowed by-passing the signature validation, if… CWE-295
Improper Certificate Validation  		CVE-2024-52510 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313217 - - - Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly allowed attaching shared files without download permissions as attachments. This … CWE-284
Improper Access Control 		CVE-2024-52509 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313218 - - - Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support aut… CWE-200
Information Exposure 		CVE-2024-52508 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313219 - - - Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is shared with which groups and users and the respective permissions was not limite… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-52507 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313220 - - - Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary code via the error parameter in URL - CVE-2024-50800 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm