Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
521 3.3 低
Local 		pypdf project pypdf pypdf projectのpypdfにおけるアルゴリズムの複雑さに関する脆弱性 CWE-407
アルゴリズムの複雑性 		CVE-2026-49460 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
522 5.5 警告
Local 		pypdf project pypdf pypdf projectのpypdfにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-49461 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
523 9.8 緊急
Network 		litellm litellm LiteLLMにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-49468 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
524 5.4 警告
Network 		Eclipse Foundation Eclipse Open VSX Eclipse FoundationのEclipse Open VSXにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-4983 2026-06-26 11:56 2026-06-23 Show GitHub Exploit DB Packet Storm
525 9.3 緊急
Network 		Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-49871 2026-06-26 11:56 2026-06-19 Show GitHub Exploit DB Packet Storm
526 8.1 重要
Network 		Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49872 2026-06-26 11:56 2026-06-19 Show GitHub Exploit DB Packet Storm
527 5.4 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-5139 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
528 7.5 重要
Network 		VoidZero Inc.
vitejs		 Vite+
vite 		vitejs等の複数ベンダの製品における複数の脆弱性 CWE-200
CWE-22
CVE-2026-53571 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
529 7.5 重要
Network 		vLLM vLLM vLLMにおける複数の脆弱性 CWE-200
CWE-681
CVE-2026-53923 2026-06-26 11:56 2026-06-22 Show GitHub Exploit DB Packet Storm
530 4.3 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-54006 2026-06-26 11:56 2026-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320621 - - - There is a cross site scripting vulnerability in the Esri Portal for ArcGIS Experience Builder 11.1 and below on Windows and Linux that allows a remote, unauthenticated attacker to create a crafted l… CWE-79
Cross-site Scripting 		CVE-2024-25705 2024-10-10 21:57 2024-04-5 Show GitHub Exploit DB Packet Storm
320622 - - - An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file in… - CVE-2024-36814 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320623 - - - Improper check for unusual or exceptional conditions in Intel(R) TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable information disclosure via local access. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2024-27457 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320624 - - - Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. T… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-47822 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320625 - - - TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/gro… CWE-863
 Incorrect Authorization 		CVE-2024-47780 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320626 - - - Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without any preloaded data. This issue only affect… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2024-47773 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320627 - - - Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service (DoS). - CVE-2024-46539 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320628 - - - PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature - CVE-2024-46410 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320629 9.8 CRITICAL
Network 		- - Microsoft Configuration Manager Remote Code Execution Vulnerability CWE-89
SQL Injection 		CVE-2024-43468 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm
320630 - - - NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a… - CVE-2024-35215 2024-10-10 21:56 2024-10-9 Show GitHub Exploit DB Packet Storm