Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
501	4.4	警告 Local	NSA	Ghidra	NSAのGhidraにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-52757	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

502	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-52758	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

503	5.5	警告 Local	NSA	Ghidra	NSAのGhidraにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-52759	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

504	8.8	重要 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-53435	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

505	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-53436	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

506	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-53437	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

507	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-53438	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

508	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-53439	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

509	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-53440	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

510	5.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおける重要なデータの暗号化の欠如に関する脆弱性	CWE-311 重要なデータの暗号化の欠如	CVE-2026-53442	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319901	7.5	HIGH Network	smart-hmi	webiq	The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system.	CWE-22 Path Traversal	CVE-2024-8752	2024-09-21 07:42	2024-09-17	Show	GitHub Exploit DB Packet Storm

319902	9.1	CRITICAL Network	nextcloud	desktop	In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.	NVD-CWE-noinfo	CVE-2024-46958	2024-09-21 07:41	2024-09-16	Show	GitHub Exploit DB Packet Storm

319903	9.8	CRITICAL Network	man	d-tale	D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrad…	NVD-CWE-noinfo	CVE-2024-45595	2024-09-21 04:59	2024-09-11	Show	GitHub Exploit DB Packet Storm

319904	8.8	HIGH Network	nixos	nix	Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to a…	CWE-22 Path Traversal	CVE-2024-45593	2024-09-21 04:57	2024-09-11	Show	GitHub Exploit DB Packet Storm

319905	6.1	MEDIUM Network	damienharper	auditor-bundle	auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript …	CWE-79 Cross-site Scripting	CVE-2024-45592	2024-09-21 04:57	2024-09-11	Show	GitHub Exploit DB Packet Storm

319906	5.3	MEDIUM Network	xwiki	xwiki	XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the pa…	CWE-862 Missing Authorization	CVE-2024-45591	2024-09-21 04:55	2024-09-11	Show	GitHub Exploit DB Packet Storm

319907	7.3	HIGH Network	fortinet	forticlient_enterprise_management_server	An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthe…	CWE-77 Command Injection	CVE-2024-33508	2024-09-21 04:48	2024-09-11	Show	GitHub Exploit DB Packet Storm

319908	6.5	MEDIUM Network	fortinet	fortisandbox	An exposure of sensitive information to an unauthorized actor in Fortinet FortiSandbox version 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.2 through 3.2.4 and 3.1.5 al…	NVD-CWE-noinfo	CVE-2024-31490	2024-09-21 04:48	2024-09-11	Show	GitHub Exploit DB Packet Storm

319909	4.6	MEDIUM Physics	fortinet	forticlient	A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions m…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-35282	2024-09-21 04:44	2024-09-11	Show	GitHub Exploit DB Packet Storm

319910	3.7	LOW Network	fortinet	fortiadc	An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2…	NVD-CWE-noinfo	CVE-2024-36511	2024-09-21 04:43	2024-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed