Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
511	7.5	重要 Network	ImageMagick	ImageMagick	ImageMagickにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-53460	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

512	7.5	重要 Network	ImageMagick	ImageMagick	ImageMagickにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-53461	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

513	5.9	警告 Network	ImageMagick	ImageMagick	ImageMagickにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-53462	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

514	4.3	警告 Network	ImageMagick	ImageMagick	ImageMagickにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-53463	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

515	4	警告 Local	ImageMagick	ImageMagick	ImageMagickにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-53464	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

516	6.2	警告 Local	ImageMagick	ImageMagick	ImageMagickにおける複数の脆弱性	CWE-122 CWE-787	CVE-2026-53465	2026-06-12 14:44	2026-06-10	Show	GitHub Exploit DB Packet Storm

517	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-6277	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

518	8.7	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-6552	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

519	3.7	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-6976	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

520	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-7250	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3211	6.5	MEDIUM Network	apache	calcite	Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended …	CWE-470 Unsafe Reflection	CVE-2026-46718	2026-06-3 11:04	2026-06-2	Show	GitHub Exploit DB Packet Storm

3212	4.3	MEDIUM Network	apache	kafka	An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMER_GROUP_DESCRIBE (69) API validates the DESCRIBE operation on the GROUP resource instead…	CWE-285 Improper Authorization	CVE-2026-41115	2026-06-3 11:04	2026-06-2	Show	GitHub Exploit DB Packet Storm

3213	6.5	MEDIUM Network	sharpcompress_project	sharpcompress	SharpCompress is a fully managed C# library to deal with many compression types and formats. In 0.47.4 and earlier, a path traversal vulnerability in IArchive.WriteToDirectory() allows a malicious ar…	CWE-22 Path Traversal	CVE-2026-44788	2026-06-3 11:02	2026-05-27	Show	GitHub Exploit DB Packet Storm

3214	6.5	MEDIUM Network	ibm	guardium_data_protection	IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credentials in debug mode.	CWE-200 NVD-CWE-noinfo Information Exposure	CVE-2026-8405	2026-06-3 10:13	2026-05-27	Show	GitHub Exploit DB Packet Storm

3215	5.3	MEDIUM Network	ibm	security_directory_integrator	IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message …	CWE-209 Information Exposure Through an Error Message	CVE-2024-28765	2026-06-3 10:13	2026-05-27	Show	GitHub Exploit DB Packet Storm

3216	7.8	HIGH Local	zed	zed	Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior (e.g.,…	CWE-78 CWE-184 OS Command Incomplete Blacklist	CVE-2026-44463	2026-06-3 10:11	2026-05-29	Show	GitHub Exploit DB Packet Storm

3217	8.8	HIGH Network	zed	zed	Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowliste…	CWE-184 Incomplete Blacklist	CVE-2026-44462	2026-06-3 10:00	2026-05-29	Show	GitHub Exploit DB Packet Storm

3218	8.6	HIGH Local	zed	zed	Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted without shell quoting or…	CWE-78 OS Command	CVE-2026-44461	2026-06-3 09:58	2026-05-29	Show	GitHub Exploit DB Packet Storm

3219	7.5	HIGH Network	jg-rp	python_liquid	Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search pa…	CWE-22 Path Traversal	CVE-2026-45017	2026-06-3 09:43	2026-05-29	Show	GitHub Exploit DB Packet Storm

3220	-		-	-	Rejected reason: This CVE is a duplicate of another CVE.	-	CVE-2026-42029	2026-06-3 07:16	2026-06-3	Show	GitHub Exploit DB Packet Storm