Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4901 8.8 重要
Network 		マイクロソフト Visual Studio Code GitHub Copilot と Visual Studio Code セキュリティ機能バイパスの脆弱性 CWE-74
インジェクション 		CVE-2026-41109 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4902 7.4 重要
Network 		Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-41132 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
4903 6.1 警告
Network 		Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-41255 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
4904 9.8 緊急
Network 		Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-41293 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4905 5 警告
Local 		マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-200
CWE-59
CWE-79
CWE-79
CVE-2026-41610 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4906 3.3 低
Local 		マイクロソフト Visual Studio Code Visual Studio Code のリモートでコードが実行される脆弱性 CWE-77
CWE-79
CWE-80
CVE-2026-41611 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
4907 8.8 重要
Network 		マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-384
CWE-384
CWE-78
CVE-2026-41613 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
4908 7.4 重要
Network 		マイクロソフト Microsoft Authenticator Microsoft Authenticator の情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-41615 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
4909 6.5 警告
Network 		Distribution Distribution Distributionにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41888 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
4910 7.5 重要
Network 		Signal K Signal K Server Signal KのSignal K Serverにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-41893 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2041 7.8 HIGH
Local 		- - TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code with system privileges. Attackers can p… CWE-428
 Unquoted Search Path or Element 		CVE-2020-37250 2026-06-23 06:14 2026-06-20 Show GitHub Exploit DB Packet Storm
2042 7.8 HIGH
Local 		- - Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by inserting malicious executables in the service path. Attackers c… CWE-428
 Unquoted Search Path or Element 		CVE-2016-20091 2026-06-23 06:14 2026-06-20 Show GitHub Exploit DB Packet Storm
2043 4.8 MEDIUM
Physics 		- - capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject parameters. Attackers can hook t… CWE-287
Improper Authentication 		CVE-2026-56294 2026-06-23 06:14 2026-06-21 Show GitHub Exploit DB Packet Storm
2044 - - - In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts. CWE-79
Cross-site Scripting 		CVE-2026-8296 2026-06-23 05:44 2026-06-19 Show GitHub Exploit DB Packet Storm
2045 - - - Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in th… CWE-285
Improper Authorization 		CVE-2026-12673 2026-06-23 05:44 2026-06-20 Show GitHub Exploit DB Packet Storm
2046 9.1 CRITICAL
Network 		- - Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a … CWE-125
Out-of-bounds Read 		CVE-2025-62821 2026-06-23 05:44 2026-06-19 Show GitHub Exploit DB Packet Storm
2047 7.5 HIGH
Network 		- - GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there i… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2025-66389 2026-06-23 05:44 2026-06-22 Show GitHub Exploit DB Packet Storm
2048 3.7 LOW
Network 		- - GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization. CWE-696
 Incorrect Behavior Order 		CVE-2026-56355 2026-06-23 05:43 2026-06-21 Show GitHub Exploit DB Packet Storm
2049 6.3 MEDIUM
Local 		- - The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed i… CWE-20
CWE-79
 Improper Input Validation 
Cross-site Scripting 		CVE-2026-21768 2026-06-23 05:42 2026-06-20 Show GitHub Exploit DB Packet Storm
2050 9.9 CRITICAL
Network 		- - Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to gi… CWE-94
Code Injection 		CVE-2026-5366 2026-06-23 05:41 2026-06-21 Show GitHub Exploit DB Packet Storm