Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
31 8.8 重要
Network 		Dokku Dokku Dokkuにおけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題 		CVE-2026-45405 2026-06-29 11:24 2026-06-26 Show GitHub Exploit DB Packet Storm
32 8.8 重要
Network 		Dokku Dokku DokkuにおけるEval インジェクションに関する脆弱性 New CWE-95
Evalインジェクション 		CVE-2026-45406 2026-06-29 11:24 2026-06-26 Show GitHub Exploit DB Packet Storm
33 5.5 警告
Local 		Dokku Dokku Dokkuにおける認証情報の不十分な保護に関する脆弱性 New CWE-522
認証情報の不十分な保護 		CVE-2026-45407 2026-06-29 11:24 2026-06-26 Show GitHub Exploit DB Packet Storm
34 9 緊急
Network 		Dokku Dokku DokkuにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-45408 2026-06-29 11:24 2026-06-26 Show GitHub Exploit DB Packet Storm
35 6.1 警告
Network 		Angular AngularJS AngularのAngularJSにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-46417 2026-06-29 11:24 2026-06-22 Show GitHub Exploit DB Packet Storm
36 7.8 重要
Local 		デル Server Hardware Manager デルのServer Hardware Managerにおけるアクセス制御に関する脆弱性 New CWE-284
CWE-Other
CVE-2026-46461 2026-06-29 11:24 2026-06-19 Show GitHub Exploit DB Packet Storm
37 9.1 緊急
Network 		オラクル JD Edwards EnterpriseOne Human Resources Management オラクルのJD Edwards EnterpriseOne Human Resources Managementにおける複数の脆弱性 New CWE-284
CWE-306
CVE-2026-46892 2026-06-29 11:24 2026-06-17 Show GitHub Exploit DB Packet Storm
38 9.9 緊急
Network 		オラクル JD Edwards EnterpriseOne General Ledger オラクルのJD Edwards EnterpriseOne General Ledgerにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-46893 2026-06-29 11:24 2026-06-17 Show GitHub Exploit DB Packet Storm
39 7.5 重要
Network 		マイクロソフト Microsoft Cost Management Microsoft Cost Management Information Disclosure Vulnerability New CWE-200
情報漏えい 		CVE-2026-47633 2026-06-29 11:24 2026-06-18 Show GitHub Exploit DB Packet Storm
40 8.8 重要
Adjacent 		radvd radvd radvdにおけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-48715 2026-06-29 11:24 2026-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3951 9.1 CRITICAL
Network 		- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, PUT /smon/check (app/routes/smon/routes.py:117-138) gates only on roxywi_common.c… CWE-639
CWE-862
CWE-863
 Authorization Bypass Through User-Controlled Key
 Missing Authorization
 Incorrect Authorization 		CVE-2026-45550 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm
3952 8.5 HIGH
Network 		- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, agent_action (app/routes/smon/agent_routes.py:166-179) has decorators @bp.post('/… CWE-862
CWE-863
 Missing Authorization
 Incorrect Authorization 		CVE-2026-45549 2026-06-11 02:16 2026-06-11 Show GitHub Exploit DB Packet Storm
3953 7.5 HIGH
Network 		- - Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows a… CWE-121
Stack-based Buffer Overflow 		CVE-2026-36813 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3954 7.5 HIGH
Network 		- - Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formModifyWebAuthUser function. This vulnerability allows … CWE-121
Stack-based Buffer Overflow 		CVE-2026-36806 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3955 7.5 HIGH
Network 		- - Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the Saveqqlist function via the qqStr and markStr parameters. These vulnerabilities allow… CWE-121
Stack-based Buffer Overflow 		CVE-2026-36805 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3956 - - - Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands.… CWE-20
 Improper Input Validation  		CVE-2026-0419 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3957 - - - Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system. CWE-15
 External Control of System or Configuration Setting 		CVE-2026-0418 2026-06-11 02:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3958 4.0 MEDIUM
Network 		- - Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sending specifically crafted non-Medib… CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2021-4479 2026-06-11 02:16 2026-06-3 Show GitHub Exploit DB Packet Storm
3959 7.9 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. CWE-1329
 Reliance on Component That is Not Updateable 		CVE-2026-48573 2026-06-11 02:15 2026-06-10 Show GitHub Exploit DB Packet Storm
3960 6.8 MEDIUM
Physics 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. CWE-306
Missing Authentication for Critical Function 		CVE-2026-50507 2026-06-11 01:33 2026-06-10 Show GitHub Exploit DB Packet Storm