Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5141	9.9	緊急 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2026-42898	2026-05-18 12:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

5142	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-43097	2026-05-18 12:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

5143	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-43098	2026-05-18 12:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

5144	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43285	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

5145	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43290	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

5146	8.3	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-43291	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

5147	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43292	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

5148	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43293	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

5149	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43294	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

5150	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43295	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1871	8.1	HIGH Network	-	-	NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by exploiting a hardcod…	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-35019	2026-06-24 01:16	2026-06-24	Show	GitHub Exploit DB Packet Storm

1872	-		-	-	FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection (SSTI) vulnerability in the template rendering system. Administr…	CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-28496	2026-06-24 01:16	2026-06-24	Show	GitHub Exploit DB Packet Storm

1873	-		-	-	FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the API role handling allows unauthenticated …	CWE-200 CWE-306 CWE-862 CWE-863 Information Exposure Missing Authentication for Critical Function Missing Authorization Incorrect Authorization	CVE-2026-27604	2026-06-24 01:16	2026-06-24	Show	GitHub Exploit DB Packet Storm

1874	5.3	MEDIUM Network	-	-	An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 …	CWE-125 Out-of-bounds Read	CVE-2026-12969	2026-06-24 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1875	8.1	HIGH Network	-	-	picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.autocomplete.AutoComplete.fetch_completions in reduce methods. Attackers can embed undetected code in pickle files that e…	CWE-502 Deserialization of Untrusted Data	CVE-2025-71376	2026-06-24 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1876	8.1	HIGH Network	-	-	Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files th…	CWE-502 Deserialization of Untrusted Data	CVE-2025-71339	2026-06-24 01:16	2026-06-23	Show	GitHub Exploit DB Packet Storm

1877	6.9	MEDIUM Local	libexpat_project	libexpat	xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.	CWE-190 Integer Overflow or Wraparound	CVE-2026-56411	2026-06-24 01:16	2026-06-22	Show	GitHub Exploit DB Packet Storm

1878	7.6	HIGH Network	-	-	conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.61.0, a vulnerability in the conda-forge …	CWE-284 Improper Access Control	CVE-2026-46699	2026-06-24 01:06	2026-06-19	Show	GitHub Exploit DB Packet Storm

1879	10.0	CRITICAL Network	-	-	mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 …	CWE-306 Missing Authentication for Critical Function	CVE-2026-49257	2026-06-24 01:06	2026-06-19	Show	GitHub Exploit DB Packet Storm

1880	6.5	MEDIUM Network	-	-	phpMyFAQ is an open source FAQ web application. Versions prior to 4.1.4 have Missing Authorization in the API CategoryController. CVE-2026-24421 addressed this in the BackupController by adding: $th…	CWE-862 Missing Authorization	CVE-2026-49205	2026-06-24 01:06	2026-06-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed