Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5511 5.3 警告
Network 		Eclipse Foundation Vert.x Eclipse FoundationのVert.xにおける複数の脆弱性 CWE-295
CWE-770
CVE-2026-6860 2026-05-14 10:15 2026-05-6 Show GitHub Exploit DB Packet Storm
5512 7.5 重要
Network 		The PHP Group PHP The PHP GroupのPHPにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-7258 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
5513 6.5 警告
Network 		The PHP Group PHP The PHP GroupのPHPにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-7259 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
5514 9.8 緊急
Network 		The PHP Group PHP The PHP GroupのPHPにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7261 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
5515 7.5 重要
Network 		The PHP Group PHP The PHP GroupのPHPにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-7262 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
5516 7.5 重要
Network 		The PHP Group PHP The PHP GroupのPHPにおける複数の脆弱性 CWE-404
CWE-835
CVE-2026-7263 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
5517 4.4 警告
Local 		Ivanti secure access client Ivantiのsecure access clientにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-7431 2026-05-14 10:15 2026-05-12 Show GitHub Exploit DB Packet Storm
5518 7 重要
Local 		Ivanti secure access client Ivantiのsecure access clientにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-7432 2026-05-14 10:14 2026-05-12 Show GitHub Exploit DB Packet Storm
5519 8.8 重要
Network 		SUN NET TECHNOLOGIES CO., LTD. eHRD CTMS SUN NET TECHNOLOGIES CO., LTD.のeHRD CTMSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-7489 2026-05-14 10:14 2026-05-2 Show GitHub Exploit DB Packet Storm
5520 7.5 重要
Network 		The PHP Group PHP The PHP GroupのPHPにおける複数の脆弱性 CWE-125
CWE-190
CVE-2026-7568 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1071 6.5 MEDIUM
Network 		- - The Gravity Forms Booking plugin for WordPress is vulnerable to time-based SQL Injection via the ‘staff_id’ parameter in all versions up to, and including, 2.7.1 due to insufficient escaping on the u… New CWE-89
SQL Injection 		CVE-2026-2508 2026-06-25 22:26 2026-06-25 Show GitHub Exploit DB Packet Storm
1072 6.5 MEDIUM
Network 		- - Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gat… New CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2026-54324 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1073 7.0 HIGH
Network 		- - Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private coul… New CWE-613
CWE-863
 Insufficient Session Expiration
 Incorrect Authorization 		CVE-2026-54321 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1074 4.2 MEDIUM
Network 		- - Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certain malformed HTML, … New CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-52846 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1075 7.6 HIGH
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI patched SVG XSS in user profile images and webhook profile images but for… New CWE-79
CWE-116
CWE-693
Cross-site Scripting
 Improper Encoding or Escaping of Output
 Protection Mechanism Failure 		CVE-2026-54013 2026-06-25 22:06 2026-06-24 Show GitHub Exploit DB Packet Storm
1076 - - - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect… New - CVE-2026-53277 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1077 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the bis pointer is cached, then the socket … New - CVE-2026-53276 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1078 - - - In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query, a pointer to the multicast group addres… New - CVE-2026-53275 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1079 - - - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS A logic flaw in __smc_setsockopt() allows a local unprivil… New - CVE-2026-53274 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1080 - - - In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a199 ("tee: optee: Fix supplicant w… New - CVE-2026-53273 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm