Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 12:21 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
61 7.5 重要
Network 		rtklib RTKLIB rtklibのRTKLIBにおける境界条件の判定に関する脆弱性 New CWE-193
境界条件の判定 		CVE-2026-56787 2026-06-29 11:23 2026-06-25 Show GitHub Exploit DB Packet Storm
62 7.1 重要
Local 		rtklib RTKLIB rtklibのRTKLIBにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-56788 2026-06-29 11:23 2026-06-25 Show GitHub Exploit DB Packet Storm
63 6.5 警告
Network 		rtklib RTKLIB rtklibのRTKLIBにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-56789 2026-06-29 11:23 2026-06-25 Show GitHub Exploit DB Packet Storm
64 2.6 低
Network 		Nokogiri project Nokogiri Nokogiriにおける複数の脆弱性 New CWE-178
CWE-184
CWE-611
CVE-2026-57234 2026-06-29 11:23 2026-06-25 Show GitHub Exploit DB Packet Storm
65 8.2 重要
Network 		Nokogiri project Nokogiri Nokogiriにおける複数の脆弱性 New CWE-125
CWE-190
CVE-2026-57235 2026-06-29 11:23 2026-06-25 Show GitHub Exploit DB Packet Storm
66 8.2 重要
Network 		Nokogiri project Nokogiri Nokogiriにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-57236 2026-06-29 11:23 2026-06-25 Show GitHub Exploit DB Packet Storm
67 4.3 警告
Network 		Jenkins プロジェクト Priority Sorter JenkinsのPriority Sorterにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-57290 2026-06-29 11:23 2026-06-24 Show GitHub Exploit DB Packet Storm
68 5.4 警告
Network 		Jenkins プロジェクト EC2 Fleet JenkinsのEC2 Fleetにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-57294 2026-06-29 11:22 2026-06-24 Show GitHub Exploit DB Packet Storm
69 5.4 警告
Network 		Jenkins プロジェクト EC2 Fleet JenkinsのEC2 Fleetにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-57295 2026-06-29 11:22 2026-06-24 Show GitHub Exploit DB Packet Storm
70 4.2 警告
Network 		Jenkins プロジェクト Zowe zDevOps JenkinsのZowe zDevOpsにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-57306 2026-06-29 11:22 2026-06-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3971 9.9 CRITICAL
Network 		- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the HAProxy section-save endpoints (POST /api/service/haproxy/<server_id>/section… CWE-20
CWE-77
CWE-78
CWE-94
 Improper Input Validation 
Command Injection
OS Command 
Code Injection 		CVE-2026-45558 2026-06-11 01:17 2026-06-11 Show GitHub Exploit DB Packet Storm
3972 9.9 CRITICAL
Network 		- - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /waf/<service>/<server_ip>/rule/<rule_id>/save accepts a config_file_name fo… CWE-20
CWE-22
CWE-73
CWE-78
 Improper Input Validation 
Path Traversal
 External Control of File Name or Path
OS Command  		CVE-2026-45556 2026-06-11 01:17 2026-06-11 Show GitHub Exploit DB Packet Storm
3973 7.5 HIGH
Network 		- - UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1. CWE-79
Cross-site Scripting 		CVE-2026-11799 2026-06-11 01:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3974 - - - Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity. CWE-20
 Improper Input Validation  		CVE-2026-0417 2026-06-11 01:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3975 - - - Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized… CWE-20
 Improper Input Validation  		CVE-2026-0412 2026-06-11 01:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3976 - - - Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality. CWE-20
 Improper Input Validation  		CVE-2026-0410 2026-06-11 01:16 2026-06-10 Show GitHub Exploit DB Packet Storm
3977 5.3 MEDIUM
Network 		google chrome Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from pr… CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-11669 2026-06-11 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
3978 8.3 HIGH
Network 		google chrome Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… CWE-787
 Out-of-bounds Write 		CVE-2026-11672 2026-06-11 01:15 2026-06-9 Show GitHub Exploit DB Packet Storm
3979 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting 		CVE-2026-47637 2026-06-11 01:14 2026-06-10 Show GitHub Exploit DB Packet Storm
3980 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting 		CVE-2026-47638 2026-06-11 01:07 2026-06-10 Show GitHub Exploit DB Packet Storm