Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5801	5.3	警告 Network	Daniel Garcia	Vaultwarden	Daniel GarciaのVaultwardenにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-33420	2026-05-11 11:11	2026-05-5	Show	GitHub Exploit DB Packet Storm

5802	7.5	重要 Network	coredns.io	CoreDNS	The CoreDNS AuthorsのCoreDNSにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-33489	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

5803	6.5	警告 Network	マイクロソフト	Microsoft Teams	Microsoft Team Events Portal Information Disclosure Vulnerability	CWE-285 不適切な認可	CVE-2026-33823	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

5804	9	緊急 Network	マイクロソフト	Azure Managed Instance for Apache Cassandra	Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability	CWE-20 不適切な入力確認	CVE-2026-33844	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

5805	8.2	重要 Network	マイクロソフト	Microsoft Partner Center	Microsoft Partner Center Spoofing Vulnerability	CWE-610 別領域リソースに対する外部からの制御可能な参照	CVE-2026-34327	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

5806	5.3	警告 Network	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける弱いハッシュの使用に関する脆弱性	CWE-328 脆弱なハッシュの使用	CVE-2026-34527	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

5807	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35072	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

5808	6.7	警告 Local	デル	data domain operating system	デルのdata domain operating systemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35073	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

5809	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35074	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

5810	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-35153	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
761	7.5	HIGH Network	-	-	Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions. New	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2026-54841	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

762	8.5	HIGH Network	-	-	Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions. New	CWE-89 SQL Injection	CVE-2026-54838	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

763	9.9	CRITICAL Network	-	-	Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions. New	CWE-94 Code Injection	CVE-2026-54823	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

764	8.5	HIGH Network	-	-	Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions. New	CWE-89 SQL Injection	CVE-2026-54822	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

765	9.9	CRITICAL Network	-	-	SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, CSS snippet body containing </style> breaks out of its surrounding <style> tag when renderSnippet() interpolates it via … New	CWE-79 CWE-1188 Cross-site Scripting Insecure Default Initialization of Resource	CVE-2026-54067	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

766	4.0	MEDIUM Network	-	-	Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacker to coerce the Ghos… New	CWE-367 CWE-918 Time-of-check Time-of-use (TOCTOU) Race Condition Server-Side Request Forgery (SSRF)	CVE-2026-53945	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

767	-		-	-	Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint at internal/route/api/v… New	CWE-200 Information Exposure	CVE-2026-52815	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

768	-		-	-	Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST …/git-receive-pack using the client-supplied service query string (so ?service=git-upload-pack is evalu… New	CWE-284 Improper Access Control	CVE-2026-52810	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

769	7.1	HIGH Network	-	-	Gogs is an open source self-hosted Git service. Prior to 0.14.3, three API endpoints — PATCH /api/v1/repos/:owner/:repo/issue-tracker, PATCH /api/v1/repos/:owner/:repo/wiki, and POST /api/v1/repos/:o… New	CWE-269 CWE-863 Improper Privilege Management Incorrect Authorization	CVE-2026-52808	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm

770	-		-	-	Gogs is an open source self-hosted Git service. Prior to 0.14.3, in new_form.tmpl, milestone names are rendered with Go's default auto-escaping ({{.Name}}), which converts < to < etc. This prevent… New	CWE-79 Cross-site Scripting	CVE-2026-52807	2026-06-26 01:16	2026-06-25	Show	GitHub Exploit DB Packet Storm