Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
51 6.1 警告
Local 		Google Chrome-devtools-mcp GoogleのChrome-devtools-mcpにおけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題 		CVE-2026-53765 2026-06-29 11:23 2026-06-24 Show GitHub Exploit DB Packet Storm
52 6.1 警告
Local 		Google Chrome-devtools-mcp GoogleのChrome-devtools-mcpにおける複数の脆弱性 New CWE-22
CWE-59
CVE-2026-53766 2026-06-29 11:23 2026-06-24 Show GitHub Exploit DB Packet Storm
53 6.1 警告
Network 		Angular AngularJS AngularのAngularJSにおける複数の脆弱性 New CWE-200
CWE-359
CVE-2026-54264 2026-06-29 11:23 2026-06-22 Show GitHub Exploit DB Packet Storm
54 6.1 警告
Network 		Angular AngularJS AngularのAngularJSにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-54265 2026-06-29 11:23 2026-06-22 Show GitHub Exploit DB Packet Storm
55 6.1 警告
Network 		Angular AngularJS AngularのAngularJSにおける複数の脆弱性 New CWE-328
CWE-345
CVE-2026-54266 2026-06-29 11:23 2026-06-22 Show GitHub Exploit DB Packet Storm
56 6.1 警告
Network 		Angular AngularJS AngularのAngularJSにおける複数の脆弱性 New CWE-471
CWE-79
CVE-2026-54267 2026-06-29 11:23 2026-06-22 Show GitHub Exploit DB Packet Storm
57 7.5 重要
Network 		Angular AngularJS AngularのAngularJSにおける複数の脆弱性 New CWE-1333
CWE-400
CVE-2026-54268 2026-06-29 11:23 2026-06-22 Show GitHub Exploit DB Packet Storm
58 9.9 緊急
Network 		Dokku Dokku DokkuにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-54636 2026-06-29 11:23 2026-06-26 Show GitHub Exploit DB Packet Storm
59 7.5 重要
Network 		Rubyconcurrency Concurrent Ruby RubyconcurrencyのConcurrent Rubyにおける無限ループに関する脆弱性 New CWE-835
無限ループ 		CVE-2026-54904 2026-06-29 11:23 2026-06-24 Show GitHub Exploit DB Packet Storm
60 5.5 警告
Local 		Rubyconcurrency Concurrent Ruby RubyconcurrencyのConcurrent Rubyにおけるラップアラウンドエラーに関する脆弱性 New CWE-128
ラップアラウンドエラー 		CVE-2026-54905 2026-06-29 11:23 2026-06-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254411 5.3 MEDIUM
Network 		json-jwt_project json-jwt Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attac… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2018-1000539 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254412 7.5 HIGH
Network 		minio minio Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can resul… CWE-774
 Allocation of File Descriptors or Handles Without Limits or Throttling 		CVE-2018-1000538 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254413 9.8 CRITICAL
Network 		marlinfw marlin_firmware Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) that can result in Arbitrary code execution. This attack appe… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-1000537 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254414 6.1 MEDIUM
Network 		getmedis medis Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creati… CWE-79
Cross-site Scripting 		CVE-2018-1000536 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254415 7.5 HIGH
Network 		lms lms lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be … CWE-200
Information Exposure 		CVE-2018-1000535 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254416 6.1 MEDIUM
Network 		joplin_project joplin Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Not… CWE-79
Cross-site Scripting 		CVE-2018-1000534 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254417 9.8 CRITICAL
Network 		gitlist gitlist klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree` function that can result in Execute any code as PHP user. This att… CWE-20
 Improper Input Validation  		CVE-2018-1000533 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254418 4.7 MEDIUM
Local 		beep_project beep beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by oth… CWE-22
Path Traversal 		CVE-2018-1000532 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254419 7.5 HIGH
Network 		inversoft prime-jwt inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT… CWE-20
 Improper Input Validation  		CVE-2018-1000531 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm
254420 6.1 MEDIUM
Network 		grails grails_fields Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8. CWE-79
Cross-site Scripting 		CVE-2018-1000529 2024-11-21 12:40 2018-06-27 Show GitHub Exploit DB Packet Storm