Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5031	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71297	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

5032	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71298	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

5033	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71299	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

5034	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71300	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

5035	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71301	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

5036	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71302	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

5037	6.7	警告 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows リッチテキストエディットの特権昇格の脆弱性	CWE-415 二重解放	CVE-2026-21530	2026-05-18 12:19	2026-05-12	Show	GitHub Exploit DB Packet Storm

5038	6.5	警告 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28847	2026-05-18 12:19	2026-05-11	Show	GitHub Exploit DB Packet Storm

5039	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28873	2026-05-18 12:19	2026-05-11	Show	GitHub Exploit DB Packet Storm

5040	6.5	警告 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28902	2026-05-18 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1991	-		-	-	Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2025-62180	2026-06-24 04:34	2026-06-24	Show	GitHub Exploit DB Packet Storm

1992	-		-	-	Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including att…	CWE-183 CWE-200 CWE-515 Permissive List of Allowed Inputs Information Exposure	CVE-2026-54316	2026-06-24 04:32	2026-06-24	Show	GitHub Exploit DB Packet Storm

1993	7.5	HIGH Network	-	-	An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.	CWE-89 SQL Injection	CVE-2025-61024	2026-06-24 04:26	2026-06-24	Show	GitHub Exploit DB Packet Storm

1994	7.5	HIGH Network	-	-	An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.	CWE-89 SQL Injection	CVE-2025-61029	2026-06-24 04:26	2026-06-24	Show	GitHub Exploit DB Packet Storm

1995	5.3	MEDIUM Network	apache	nifi	Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided…	CWE-346 Origin Validation Error	CVE-2026-54665	2026-06-24 04:19	2026-06-22	Show	GitHub Exploit DB Packet Storm

1996	8.1	HIGH Network	-	-	picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Mali…	CWE-502 Deserialization of Untrusted Data	CVE-2025-71344	2026-06-24 04:17	2026-06-23	Show	GitHub Exploit DB Packet Storm

1997	7.5	HIGH Network	-	-	Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CVE-2023-44487 / CVE-…	CWE-400 Uncontrolled Resource Consumption	CVE-2023-54365	2026-06-24 04:17	2026-06-23	Show	GitHub Exploit DB Packet Storm

1998	5.4	MEDIUM Network	-	-	NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent …	CWE-863 Incorrect Authorization	CVE-2026-56694	2026-06-24 03:18	2026-06-24	Show	GitHub Exploit DB Packet Storm

1999	6.5	MEDIUM Network	-	-	NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can a…	CWE-862 Missing Authorization	CVE-2026-56402	2026-06-24 03:18	2026-06-24	Show	GitHub Exploit DB Packet Storm

2000	8.8	HIGH Network	-	-	A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged user could add an unexpected component parameter and inject malicious…	CWE-94 Code Injection	CVE-2026-44959	2026-06-24 03:17	2026-06-24	Show	GitHub Exploit DB Packet Storm