Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
61	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性 New	CWE-noinfo 情報不足	CVE-2026-46106	2026-06-26 11:58	2026-05-28	Show	GitHub Exploit DB Packet Storm

62	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数アンダーフローの脆弱性 New	CWE-191 整数アンダーフロー	CVE-2026-46107	2026-06-26 11:58	2026-05-28	Show	GitHub Exploit DB Packet Storm

63	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性 New	CWE-noinfo 情報不足	CVE-2026-46108	2026-06-26 11:58	2026-05-28	Show	GitHub Exploit DB Packet Storm

64	6.5	警告 Network	Silicon Labs, Inc.	emberznet	Silicon Labs, Inc.のemberznetにおける到達可能なアサーションに関する脆弱性 New	CWE-617 到達可能なアサーション	CVE-2026-47145	2026-06-26 11:58	2026-06-25	Show	GitHub Exploit DB Packet Storm

65	6.5	警告 Network	Silicon Labs, Inc.	emberznet	Silicon Labs, Inc.のemberznetにおける到達可能なアサーションに関する脆弱性 New	CWE-617 到達可能なアサーション	CVE-2026-47146	2026-06-26 11:58	2026-06-25	Show	GitHub Exploit DB Packet Storm

66	7.1	重要 Network	Silicon Labs, Inc.	emberznet	Silicon Labs, Inc.のemberznetにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-47147	2026-06-26 11:58	2026-06-25	Show	GitHub Exploit DB Packet Storm

67	6.5	警告 Network	Silicon Labs, Inc.	emberznet	Silicon Labs, Inc.のemberznetにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-47148	2026-06-26 11:58	2026-06-25	Show	GitHub Exploit DB Packet Storm

68	6.5	警告 Network	Silicon Labs, Inc.	emberznet	Silicon Labs, Inc.のemberznetにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-47149	2026-06-26 11:57	2026-06-25	Show	GitHub Exploit DB Packet Storm

69	7.1	重要 Network	Silicon Labs, Inc.	emberznet	Silicon Labs, Inc.のemberznetにおける境界外書き込みに関する脆弱性 New	CWE-787 境界外書き込み	CVE-2026-47150	2026-06-26 11:57	2026-06-25	Show	GitHub Exploit DB Packet Storm

70	7.1	重要 Network	Silicon Labs, Inc.	emberznet	Silicon Labs, Inc.のemberznetにおける境界外書き込みに関する脆弱性 New	CWE-787 境界外書き込み	CVE-2026-47151	2026-06-26 11:57	2026-06-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254281	8.8	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_1803 windows_10_1703 windows_10_1709 windows_10_1803 wind…	A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." T…	CWE-502 Deserialization of Untrusted Data	CVE-2018-0824	2024-11-21 12:39	2018-05-10	Show	GitHub Exploit DB Packet Storm

254282	7.5	HIGH Network	quassel-irc debian	quassel debian_linux	A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause …	CWE-476 NULL Pointer Dereference	CVE-2018-1000179	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254283	9.8	CRITICAL Network	quassel-irc debian	quassel debian_linux	A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to e…	CWE-787 Out-of-bounds Write	CVE-2018-1000178	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254284	5.4	MEDIUM Network	jenkins	s3_publisher	A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control…	CWE-79 Cross-site Scripting	CVE-2018-1000177	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254285	6.5	MEDIUM Network	jenkins	email_extension	An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and Exten…	CWE-200 Information Exposure	CVE-2018-1000176	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254286	6.5	MEDIUM Network	jenkins	html_publisher	A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arb…	CWE-22 Path Traversal	CVE-2018-1000175	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254287	6.1	MEDIUM Network	jenkins	google_login	An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.	CWE-601 Open Redirect	CVE-2018-1000174	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254288	5.9	MEDIUM Network	jenkins	google_login	A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can cont…	CWE-384 Session Fixation	CVE-2018-1000173	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254289	7.5	HIGH Network	nghttp2 nodejs debian	nghttp2 node.js debian_linux	nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service…	CWE-20 CWE-476 Improper Input Validation NULL Pointer Dereference	CVE-2018-1000168	2024-11-21 12:39	2018-05-9	Show	GitHub Exploit DB Packet Storm

254290	4.8	MEDIUM Network	imagely	nextgen_gallery	Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image …	CWE-79 Cross-site Scripting	CVE-2018-1000172	2024-11-21 12:39	2018-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed