Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
61 7.5 重要
Network 		QNAP Systems qumagie QNAP Systemsのqumagieにおける複数の脆弱性 New CWE-359
CWE-862
CWE-862
CVE-2026-26237 2026-06-15 11:19 2026-06-10 Show GitHub Exploit DB Packet Storm
62 8.1 重要
Network 		QNAP Systems File Station 5 QNAP SystemsのFile Station 5におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-26239 2026-06-15 11:19 2026-06-10 Show GitHub Exploit DB Packet Storm
63 9.1 緊急
Network 		QNAP Systems File Station 5 QNAP SystemsのFile Station 5におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-26240 2026-06-15 11:19 2026-06-10 Show GitHub Exploit DB Packet Storm
64 9.1 緊急
Network 		QNAP Systems File Station 5 QNAP SystemsのFile Station 5におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-26241 2026-06-15 11:19 2026-06-10 Show GitHub Exploit DB Packet Storm
65 9.8 緊急
Network 		オラクル PeopleSoft Enterprise PeopleTools オラクルのPeopleSoft Enterprise PeopleToolsにおける重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35273 2026-06-15 11:19 2026-06-11 Show GitHub Exploit DB Packet Storm
66 7.5 重要
Network 		VMware Spring Security VMwareのSpring Securityにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-40988 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
67 5.4 警告
Network 		VMware Spring Security VMwareのSpring Securityにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41003 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
68 6.1 警告
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41539 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
69 5.3 警告
Network 		VMware Spring Security VMwareのSpring Securityにおけるデジタル署名の検証に関する脆弱性 New CWE-347
デジタル署名の不適切な検証 		CVE-2026-41694 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
70 9.8 緊急
Network 		VMware spring for graphql VMwareのspring for graphqlにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-41699 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319811 9.8 CRITICAL
Network 		microfocus edirectory Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-38132 2024-09-19 06:04 2024-09-12 Show GitHub Exploit DB Packet Storm
319812 6.1 MEDIUM
Network 		microfocus edirectory Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000. CWE-79
Cross-site Scripting 		CVE-2021-38131 2024-09-19 06:00 2024-09-12 Show GitHub Exploit DB Packet Storm
319813 6.1 MEDIUM
Network 		i-doit i-doit Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the … CWE-79
Cross-site Scripting 		CVE-2024-8750 2024-09-19 05:38 2024-09-12 Show GitHub Exploit DB Packet Storm
319814 5.3 MEDIUM
Network 		ordat ordat.erp User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password func… CWE-203
 Information Exposure Through Discrepancy 		CVE-2024-34336 2024-09-19 05:32 2024-09-13 Show GitHub Exploit DB Packet Storm
319815 6.1 MEDIUM
Network 		ordat ordat.erp ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page. CWE-79
Cross-site Scripting 		CVE-2024-34335 2024-09-19 05:32 2024-09-13 Show GitHub Exploit DB Packet Storm
319816 7.5 HIGH
Network 		ordat ordat.erp ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. CWE-89
SQL Injection 		CVE-2024-34334 2024-09-19 05:32 2024-09-13 Show GitHub Exploit DB Packet Storm
319817 9.8 CRITICAL
Network 		soplanning soplanning A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this vulnerability, an attacker can upload executable files that are moved to a publ… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-27115 2024-09-19 05:32 2024-09-11 Show GitHub Exploit DB Packet Storm
319818 3.1 LOW
Network 		keyfactor ejbca The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CM… NVD-CWE-noinfo
CVE-2024-36066 2024-09-19 05:28 2024-09-13 Show GitHub Exploit DB Packet Storm
319819 7.8 HIGH
Local 		wibu wibukey An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in ke… CWE-787
 Out-of-bounds Write 		CVE-2024-45181 2024-09-19 05:26 2024-09-13 Show GitHub Exploit DB Packet Storm
319820 6.1 MEDIUM
Network 		discourse calendar Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rendering event names can be susceptible to XSS attacks. This vulnerability only aff… CWE-79
Cross-site Scripting 		CVE-2024-45303 2024-09-19 05:25 2024-09-13 Show GitHub Exploit DB Packet Storm