Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5221 5.3 警告
Network 		Haxx cURL HaxxのcURLにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-7009 2026-05-18 12:09 2026-05-13 Show GitHub Exploit DB Packet Storm
5222 5.3 警告
Network 		Haxx cURL HaxxのcURLにおけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2026-7168 2026-05-18 12:09 2026-05-13 Show GitHub Exploit DB Packet Storm
5223 3.5 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-7471 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
5224 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7481 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
5225 5.5 警告
Local 		GPAC GPAC GPACにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-8124 2026-05-18 12:09 2026-05-8 Show GitHub Exploit DB Packet Storm
5226 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-8144 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
5227 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-8280 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
5228 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8291 2026-05-18 12:09 2026-05-11 Show GitHub Exploit DB Packet Storm
5229 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8292 2026-05-18 12:09 2026-05-11 Show GitHub Exploit DB Packet Storm
5230 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-8390 2026-05-18 12:09 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1381 5.4 MEDIUM
Network 		jenkins assembla A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and pa… CWE-862
 Missing Authorization 		CVE-2026-57304 2026-06-26 03:46 2026-06-24 Show GitHub Exploit DB Packet Storm
1382 7.1 HIGH
Network 		jenkins assembla Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla ser… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-57303 2026-06-26 03:45 2026-06-24 Show GitHub Exploit DB Packet Storm
1383 7.5 HIGH
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompre… CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification) 		CVE-2026-54314 2026-06-26 03:42 2026-06-24 Show GitHub Exploit DB Packet Storm
1384 7.7 HIGH
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace opera… CWE-89
SQL Injection 		CVE-2026-54313 2026-06-26 03:42 2026-06-24 Show GitHub Exploit DB Packet Storm
1385 8.5 HIGH
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-54312 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1386 7.7 HIGH
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used by the Merge node's … CWE-488
 Exposure of Data Element to Wrong Session 		CVE-2026-54311 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1387 9.9 CRITICAL
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleD… CWE-89
SQL Injection 		CVE-2026-54310 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1388 10.0 CRITICAL
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint accepts session initialization and tool invocatio… CWE-306
Missing Authentication for Critical Function 		CVE-2026-54309 2026-06-26 03:40 2026-06-24 Show GitHub Exploit DB Packet Storm
1389 5.4 MEDIUM
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response without sanitization o… CWE-79
Cross-site Scripting 		CVE-2026-54303 2026-06-26 03:39 2026-06-24 Show GitHub Exploit DB Packet Storm
1390 5.5 MEDIUM
Local 		nuxt nuxt Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to an abstract-namespace Unix socket without permission restr… CWE-276
Incorrect Default Permissions  		CVE-2026-56301 2026-06-26 03:39 2026-06-23 Show GitHub Exploit DB Packet Storm