Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3851 5.4 警告
Network 		ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44924 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
3852 8.8 重要
Adjacent 		ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-44925 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
3853 6.1 警告
Network 		SimpleSAMLphp simplesamlphp-casserver SimpleSAMLphpのsimplesamlphp-casserverにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-65954 2026-05-25 10:26 2026-05-18 Show GitHub Exploit DB Packet Storm
3854 5.3 警告
Network 		LupinLin1 JiMeng Web MCP Server LupinLin1のJiMeng Web MCP Serverにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2025-70040 2026-05-25 10:25 2026-03-9 Show GitHub Exploit DB Packet Storm
3855 5.4 警告
Network 		ERLANG Erlang/ssh
Erlang/OTP 		ERLANGのErlang/OTP等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-23942 2026-05-25 10:25 2026-03-13 Show GitHub Exploit DB Packet Storm
3856 5.3 警告
Network 		ERLANG Erlang/ssh
Erlang/OTP 		ERLANGのErlang/OTP等の複数製品における高圧縮データの処理 (データ増幅)に関する脆弱性 CWE-409
高圧縮データの不適切な処理 (データ増幅) 		CVE-2026-23943 2026-05-25 10:25 2026-03-13 Show GitHub Exploit DB Packet Storm
3857 7.8 重要
Local 		Uderzo Software SpaceSniffer Uderzo SoftwareのSpaceSnifferにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-26738 2026-05-25 10:25 2026-03-10 Show GitHub Exploit DB Packet Storm
3858 9.8 緊急
Network 		zlib zlib Ruby-lang.orgのZlibにおける複数の脆弱性 CWE-120
CWE-131
CVE-2026-27820 2026-05-25 10:25 2026-04-16 Show GitHub Exploit DB Packet Storm
3859 7.8 重要
Local 		Louis Pilfold Gleam Louis PilfoldのGleamにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-32146 2026-05-25 10:25 2026-04-11 Show GitHub Exploit DB Packet Storm
3860 4.3 警告
Network 		ERLANG Erlang/ssh
Erlang/OTP 		ERLANGのErlang/OTP等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-32147 2026-05-25 10:25 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3271 - - - QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version: CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2025-59382 2026-06-12 11:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3272 7.5 HIGH
Network 		nlnetlabs routinator When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2026-49235 2026-06-12 10:37 2026-06-9 Show GitHub Exploit DB Packet Storm
3273 7.5 HIGH
Network 		nlnetlabs routinator Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cache. This allows for path traversal by having a module name … CWE-22
Path Traversal 		CVE-2026-49233 2026-06-12 10:33 2026-06-9 Show GitHub Exploit DB Packet Storm
3274 7.5 HIGH
Network 		nlnetlabs routinator When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted n… CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-49234 2026-06-12 10:28 2026-06-9 Show GitHub Exploit DB Packet Storm
3275 6.5 MEDIUM
Network 		nsa ghidra Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and passes client-supplied namespace strings directly to filesystem operation… CWE-22
Path Traversal 		CVE-2026-52756 2026-06-12 10:18 2026-06-10 Show GitHub Exploit DB Packet Storm
3276 4.4 MEDIUM
Local 		nsa ghidra Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafti… CWE-416
 Use After Free 		CVE-2026-52757 2026-06-12 10:10 2026-06-10 Show GitHub Exploit DB Packet Storm
3277 4.3 MEDIUM
Network 		jenkins jenkins Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after login, allowing attacke… CWE-601
Open Redirect 		CVE-2026-53440 2026-06-12 10:03 2026-06-10 Show GitHub Exploit DB Packet Storm
3278 5.3 MEDIUM
Network 		jenkins jenkins Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenki… CWE-311
Missing Encryption of Sensitive Data 		CVE-2026-53442 2026-06-12 09:59 2026-06-10 Show GitHub Exploit DB Packet Storm
3279 7.2 HIGH
Network 		apache answer Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after… CWE-1259
 Improper Restriction of Security Token Assignment 		CVE-2026-25700 2026-06-12 09:50 2026-06-11 Show GitHub Exploit DB Packet Storm
3280 8.3 HIGH
Network 		plane plane Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in … CWE-639
CWE-862
 Authorization Bypass Through User-Controlled Key
 Missing Authorization 		CVE-2026-46558 2026-06-12 09:49 2026-06-11 Show GitHub Exploit DB Packet Storm