Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4311	7.5	重要 Network	Zcash Foundation	Zebra-chain Zebrad	Zcash FoundationのZebra-chain等の複数製品における到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-41584	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

4312	5.3	警告 Network	projectdiscovery	Nuclei	ProjectDiscovery, Inc.のNucleiにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41645	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

4313	5.5	警告 Local	projectdiscovery	Nuclei	ProjectDiscovery, Inc.のNucleiにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-41646	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

4314	8.1	重要 Network		-	OpenC3のOpenC3 COSMOSにおける未検証のパスワード変更に関する脆弱性	CWE-620 未検証のパスワード変更	CVE-2026-42084	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

4315	4.3	警告 Network		-	OpenC3のOpenC3 COSMOSにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-42085	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

4316	4.6	警告 Network		-	OpenC3のOpenC3 COSMOSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42086	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

4317	9.6	緊急 Network		-	OpenC3のOpenC3 COSMOSにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42087	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

4318	9.8	緊急 Network	litellm	litellm	LiteLLMにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42208	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

4319	9.1	緊急 Network	OpenEXR	OpenEXR	OpenEXRにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-42216	2026-05-11 11:09	2026-05-7	Show	GitHub Exploit DB Packet Storm

4320	9.8	緊急 Network	OpenEXR	OpenEXR	OpenEXRにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-42217	2026-05-11 11:09	2026-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
971	6.5	MEDIUM Network	-	-	An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from in…	CWE-617 Reachable Assertion	CVE-2026-9750	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

972	6.5	MEDIUM Network	-	-	An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-wi…	CWE-476 NULL Pointer Dereference	CVE-2026-9752	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

973	8.1	HIGH Network	-	-	The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApply…	CWE-1287 Improper Validation of Specified Type of Input	CVE-2026-9753	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

974	6.5	MEDIUM Network	-	-	An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command	CWE-457 Use of Uninitialized Variable	CVE-2026-9754	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

975	5.4	MEDIUM Network	microsoft	sharepoint_server	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	CWE-79 Cross-site Scripting	CVE-2026-45479	2026-06-11 04:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

976	6.1	MEDIUM Network	-	-	Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in …	CWE-79 Cross-site Scripting	CVE-2026-32856	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

977	5.4	MEDIUM Network	-	-	Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting vulnerability in index.php where the dir parameter value is reflected without HTML encoding inside the HT…	CWE-79 Cross-site Scripting	CVE-2026-25557	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

978	6.1	MEDIUM Network	-	-	OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the …	CWE-79 Cross-site Scripting	CVE-2026-34416	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

979	6.1	MEDIUM Network	-	-	OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embeddi…	CWE-79 Cross-site Scripting	CVE-2026-25860	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

980	6.1	MEDIUM Network	-	-	OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through th…	CWE-79 Cross-site Scripting	CVE-2026-34417	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm