Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4131 6.7 警告
Local
デル data domain operating system デルのdata domain operating systemにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-35073 2026-05-11 11:10 2026-04-17 Show GitHub Exploit DB Packet Storm
4132 6.7 警告
Local
デル data domain operating system
PowerProtect DP Series Appliance
デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-35074 2026-05-11 11:10 2026-04-17 Show GitHub Exploit DB Packet Storm
4133 6.7 警告
Local
デル data domain operating system
PowerProtect DP Series Appliance
デルのdata domain operating system等の複数製品における引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-35153 2026-05-11 11:10 2026-04-17 Show GitHub Exploit DB Packet Storm
4134 8.8 重要
Network
Project Jupyter Jupyter Server Project JupyterのJupyter Serverにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-35397 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
4135 9.6 緊急
Network
マイクロソフト Azure Cloud Shell Azure Cloud Shell Spoofing Vulnerability CWE-77
コマンドインジェクション
CVE-2026-35428 2026-05-11 11:10 2026-05-7 Show GitHub Exploit DB Packet Storm
4136 10 緊急
Network
マイクロソフト Azure AI Foundry Azure AI Foundry の特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35435 2026-05-11 11:10 2026-05-7 Show GitHub Exploit DB Packet Storm
4137 9.8 緊急
Network
coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-35579 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
4138 9.8 緊急
Network
Kestra Kestra KestraにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-38428 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
4139 7.2 重要
Network
Gotenberg, Inc. Gotenberg TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-39383 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
4140 8.8 重要
Network
Apache Software Foundation Apache NiFi Apache Software FoundationのApache NiFiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-39816 2026-05-11 11:10 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 - - - A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpec… New CWE-617
 Reachable Assertion
CVE-2026-29115 2026-06-10 16:16 2026-06-10 Show GitHub Exploit DB Packet Storm
762 - - - A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudul… New CWE-538
 File and Directory Information Exposure
CVE-2026-29114 2026-06-10 16:16 2026-06-10 Show GitHub Exploit DB Packet Storm
763 - - - An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken … New CWE-502
 Deserialization of Untrusted Data
CVE-2026-11815 2026-06-10 16:16 2026-06-10 Show GitHub Exploit DB Packet Storm
764 - - - A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vul… New CWE-121
Stack-based Buffer Overflow
CVE-2026-26241 2026-06-10 14:16 2026-06-10 Show GitHub Exploit DB Packet Storm
765 - - - A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vul… New CWE-121
Stack-based Buffer Overflow
CVE-2026-26240 2026-06-10 14:16 2026-06-10 Show GitHub Exploit DB Packet Storm
766 7.3 HIGH
Local
- - A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOL… New CWE-59
Link Following
CVE-2026-11837 2026-06-10 14:16 2026-06-10 Show GitHub Exploit DB Packet Storm
767 2.4 LOW
Network
- - A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cross site scripting.… Update CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-11434 2026-06-10 14:16 2026-06-7 Show GitHub Exploit DB Packet Storm
768 - - - A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We… New CWE-121
Stack-based Buffer Overflow
CVE-2026-26239 2026-06-10 13:17 2026-06-10 Show GitHub Exploit DB Packet Storm
769 - - - A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We hav… New CWE-359
CWE-862
 Exposure of Private Personal Information to an Unauthorized Actor
 Missing Authorization
CVE-2026-26237 2026-06-10 13:17 2026-06-10 Show GitHub Exploit DB Packet Storm
770 - - - An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass intended access restr… New CWE-863
 Incorrect Authorization
CVE-2026-24724 2026-06-10 13:17 2026-06-10 Show GitHub Exploit DB Packet Storm