Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4931 6.5 警告
Network 		webpack.js webpack-dev-server webpackのwebpack-dev-serverにおける危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開 		CVE-2026-6402 2026-05-20 13:25 2026-05-12 Show GitHub Exploit DB Packet Storm
4932 5.4 警告
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-6472 2026-05-20 13:25 2026-05-14 Show GitHub Exploit DB Packet Storm
4933 8.8 重要
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-6473 2026-05-20 13:25 2026-05-14 Show GitHub Exploit DB Packet Storm
4934 4.3 警告
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおける書式文字列に関する脆弱性 CWE-134
書式文字列の問題 		CVE-2026-6474 2026-05-20 13:25 2026-05-14 Show GitHub Exploit DB Packet Storm
4935 8.8 重要
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-6475 2026-05-20 13:25 2026-05-14 Show GitHub Exploit DB Packet Storm
4936 7.2 重要
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-6476 2026-05-20 13:24 2026-05-14 Show GitHub Exploit DB Packet Storm
4937 8.8 重要
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおける本質的に危険な機能の使用に関する脆弱性 CWE-242
本質的に危険な機能の使用 		CVE-2026-6477 2026-05-20 13:24 2026-05-14 Show GitHub Exploit DB Packet Storm
4938 6.5 警告
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおける秘密のタイミングチャネルに関する脆弱性 CWE-385
秘密のタイミングチャネル 		CVE-2026-6478 2026-05-20 13:24 2026-05-14 Show GitHub Exploit DB Packet Storm
4939 7.5 重要
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-6479 2026-05-20 13:24 2026-05-14 Show GitHub Exploit DB Packet Storm
4940 4.3 警告
Network 		PostgreSQL.org PostgreSQL PostgreSQL.orgのPostgreSQLにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-6575 2026-05-20 13:24 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2081 4.3 MEDIUM
Network 		- - libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes `decoder_context::read_slice_NAL()` (`libde265/decctx.cc:481`… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-49337 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
2082 - - - launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path… CWE-73
CWE-522
 External Control of File Name or Path
 Insufficiently Protected Credentials 		CVE-2026-53632 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
2083 5.3 MEDIUM
Network 		- - @astrojs/netlify is an adapter that allows Astro to deploy your hybrid or server rendered site to Netlify. Prior to 7.0.13, @astrojs/netlify converts Astro image.remotePatterns into Netlify Image CDN… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-54300 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
2084 - - - Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause denial of service. Plug.Conn.Query.decode/4 (and Plug.Conn.Query.decode_each/2… CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-54892 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
2085 - - - An HTML injection vulnerability exists in the Google Chat webhook notification  sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An attacker can insert l… CWE-74
Injection 		CVE-2026-12888 2026-06-24 00:42 2026-06-22 Show GitHub Exploit DB Packet Storm
2086 6.8 MEDIUM
Local 		- - The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously… CWE-415
 Double Free 		CVE-2026-56109 2026-06-24 00:42 2026-06-23 Show GitHub Exploit DB Packet Storm
2087 5.3 MEDIUM
Network 		- - Versions of the package ts-deepmerge before 8.0.0 are vulnerable to Uncaught Exception due to the improper handling of built-in Object.prototype methods (such as toString, valueOf). When user-control… CWE-248
 Uncaught Exception 		CVE-2026-12644 2026-06-24 00:42 2026-06-19 Show GitHub Exploit DB Packet Storm
2088 7.8 HIGH
Local 		- - Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attackers to escalate privileges by placing malicious executables in intermediate dir… CWE-428
 Unquoted Search Path or Element 		CVE-2019-25747 2026-06-24 00:42 2026-06-20 Show GitHub Exploit DB Packet Storm
2089 7.8 HIGH
Local 		- - RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. Attackers can place malicious executables… CWE-428
 Unquoted Search Path or Element 		CVE-2020-37251 2026-06-24 00:42 2026-06-20 Show GitHub Exploit DB Packet Storm
2090 7.8 HIGH
Local 		- - Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local attackers to escalate privileges. Attackers can place malicious executables in the P… CWE-428
 Unquoted Search Path or Element 		CVE-2020-37253 2026-06-24 00:42 2026-06-20 Show GitHub Exploit DB Packet Storm