Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
371 5.4 警告
Network 		レッドハット Red Hat Directory Server
389 Directory Server
Red Hat Enterprise Linux 		レッドハットの389 Directory Server等の複数製品における境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-12528 2026-06-29 11:06 2026-06-17 Show GitHub Exploit DB Packet Storm
372 10 緊急
Network 		WSO2 WSO2 API Manager WSO2のWSO2 API Managerにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-2053 2026-06-29 11:06 2026-06-26 Show GitHub Exploit DB Packet Storm
373 7.5 重要
Network 		Envoy Proxy Envoy Envoy ProxyのEnvoyにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-47204 2026-06-29 11:06 2026-06-26 Show GitHub Exploit DB Packet Storm
374 6.5 警告
Network 		Envoy Proxy Envoy Envoy ProxyのEnvoyにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-47207 2026-06-29 11:06 2026-06-26 Show GitHub Exploit DB Packet Storm
375 7.5 重要
Network 		Envoy Proxy Envoy Envoy ProxyのEnvoyにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-47221 2026-06-29 11:06 2026-06-26 Show GitHub Exploit DB Packet Storm
376 4.3 警告
Adjacent 		Envoy Proxy Envoy Envoy ProxyのEnvoyにおけるレングスパラメーターの不整合による処理に関する脆弱性 New CWE-130
レングスパラメーターの不整合による不適切な処理 		CVE-2026-47692 2026-06-29 11:06 2026-06-26 Show GitHub Exploit DB Packet Storm
377 7.5 重要
Network 		FasterXML, LLC Jackson-databind FasterXML, LLCのJackson-databindにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-50193 2026-06-29 11:06 2026-06-23 Show GitHub Exploit DB Packet Storm
378 7.5 重要
Network 		sentry sentry sentryにおける非効率的な正規表現の複雑さに関する脆弱性 New CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-52794 2026-06-29 11:06 2026-06-24 Show GitHub Exploit DB Packet Storm
379 9.8 緊急
Network 		JetBrains Kotlin JetBrainsのKotlinにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-53914 2026-06-29 11:06 2026-06-26 Show GitHub Exploit DB Packet Storm
380 8.1 重要
Network 		FasterXML, LLC Jackson-databind FasterXML, LLCのJackson-databindにおける複数の脆弱性 New CWE-184
CWE-502
CVE-2026-54512 2026-06-29 11:06 2026-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254151 8.8 HIGH
Network 		baijiacms_project baijiacms baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account. CWE-352
 Origin Validation Error 		CVE-2018-10249 2024-11-21 12:41 2018-04-21 Show GitHub Exploit DB Packet Storm
254152 5.4 MEDIUM
Network 		icmsdev icms iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search. CWE-79
Cross-site Scripting 		CVE-2018-10250 2024-11-21 12:41 2018-04-21 Show GitHub Exploit DB Packet Storm
254153 6.5 MEDIUM
Network 		wuzhicms wuzhi_cms An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycle_delete. CWE-352
 Origin Validation Error 		CVE-2018-10248 2024-11-21 12:41 2018-04-21 Show GitHub Exploit DB Packet Storm
254154 5.3 MEDIUM
Network 		awstats awstats A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682… CWE-200
Information Exposure 		CVE-2018-10245 2024-11-21 12:41 2018-04-21 Show GitHub Exploit DB Packet Storm
254155 7.5 HIGH
Network 		ncomputing vspace_pro An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root directory of the web server. This vulne… CWE-22
Path Traversal 		CVE-2018-10201 2024-11-21 12:41 2018-04-20 Show GitHub Exploit DB Packet Storm
254156 9.8 CRITICAL
Network 		bacnet_protocol_stack_project bacnet_protocol_stack bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a lack of packet-size validation. The affected component is bacserv BACnet/IP BVLC forwarded … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-10238 2024-11-21 12:41 2018-04-20 Show GitHub Exploit DB Packet Storm
254157 7.2 HIGH
Network 		poscms poscms POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker can control the value of $data['name'] wi… CWE-94
Code Injection 		CVE-2018-10236 2024-11-21 12:41 2018-04-20 Show GitHub Exploit DB Packet Storm
254158 7.2 HIGH
Network 		poscms poscms POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache['setti… CWE-94
Code Injection 		CVE-2018-10235 2024-11-21 12:41 2018-04-20 Show GitHub Exploit DB Packet Storm
254159 6.1 MEDIUM
Network 		zend zend_server Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455. CWE-79
Cross-site Scripting 		CVE-2018-10230 2024-11-21 12:41 2018-04-20 Show GitHub Exploit DB Packet Storm
254160 5.4 MEDIUM
Network 		1234n minicms MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter. CWE-79
Cross-site Scripting 		CVE-2018-10227 2024-11-21 12:41 2018-04-19 Show GitHub Exploit DB Packet Storm