Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
71 6.5 警告
Network 		Silicon Labs, Inc. emberznet Silicon Labs, Inc.のemberznetにおけるゼロ除算に関する脆弱性 New CWE-369
ゼロ除算 		CVE-2026-47152 2026-06-26 11:57 2026-06-25 Show GitHub Exploit DB Packet Storm
72 6.5 警告
Network 		Silicon Labs, Inc. emberznet Silicon Labs, Inc.のemberznetにおけるゼロ除算に関する脆弱性 New CWE-369
ゼロ除算 		CVE-2026-47153 2026-06-26 11:57 2026-06-25 Show GitHub Exploit DB Packet Storm
73 6.5 警告
Network 		Silicon Labs, Inc. emberznet Silicon Labs, Inc.のemberznetにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-47154 2026-06-26 11:57 2026-06-25 Show GitHub Exploit DB Packet Storm
74 6.5 警告
Network 		vLLM vLLM vLLMにおけるデータの信頼性についての不十分な検証に関する脆弱性 New CWE-345
データの信頼性についての不十分な検証 		CVE-2026-47155 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
75 8.1 重要
Network 		Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-47339 2026-06-26 11:57 2026-06-19 Show GitHub Exploit DB Packet Storm
76 6.5 警告
Network 		Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおけるCapture-replay による認証回避に関する脆弱性 New CWE-294
Capture-replayによる認証回避 		CVE-2026-47341 2026-06-26 11:57 2026-06-19 Show GitHub Exploit DB Packet Storm
77 9.9 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Dynamics 365 Elevation of Privilege Vulnerability New CWE-284
不適切なアクセス制御 		CVE-2026-47647 2026-06-26 11:57 2026-06-18 Show GitHub Exploit DB Packet Storm
78 8.2 重要
Network 		MessagePack MessagePack MessagePackにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-48109 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
79 7.5 重要
Network 		MessagePack MessagePack MessagePackにおける複数の脆弱性 New CWE-1188
CWE-125
CWE-190
CWE-407
CWE-409
CWE-470
CWE-502
CWE-674
CWE-789
CVE-2026-48502 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
80 7.5 重要
Network 		MessagePack MessagePack MessagePackにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-48506 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254281 8.8 HIGH
Network 		microsoft windows_server_2008
windows_server_2012
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_1803
windows_10_1703
windows_10_1709
windows_10_1803
wind… 		A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." T… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-0824 2024-11-21 12:39 2018-05-10 Show GitHub Exploit DB Packet Storm
254282 7.5 HIGH
Network 		quassel-irc
debian 		quassel
debian_linux 		A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause … CWE-476
 NULL Pointer Dereference 		CVE-2018-1000179 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254283 9.8 CRITICAL
Network 		quassel-irc
debian 		quassel
debian_linux 		A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to e… CWE-787
 Out-of-bounds Write 		CVE-2018-1000178 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254284 5.4 MEDIUM
Network 		jenkins s3_publisher A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control… CWE-79
Cross-site Scripting 		CVE-2018-1000177 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254285 6.5 MEDIUM
Network 		jenkins email_extension An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and Exten… CWE-200
Information Exposure 		CVE-2018-1000176 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254286 6.5 MEDIUM
Network 		jenkins html_publisher A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arb… CWE-22
Path Traversal 		CVE-2018-1000175 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254287 6.1 MEDIUM
Network 		jenkins google_login An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login. CWE-601
Open Redirect 		CVE-2018-1000174 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254288 5.9 MEDIUM
Network 		jenkins google_login A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can cont… CWE-384
 Session Fixation 		CVE-2018-1000173 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254289 7.5 HIGH
Network 		nghttp2
nodejs
debian 		nghttp2
node.js
debian_linux 		nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service… CWE-20
CWE-476
 Improper Input Validation 
 NULL Pointer Dereference 		CVE-2018-1000168 2024-11-21 12:39 2018-05-9 Show GitHub Exploit DB Packet Storm
254290 4.8 MEDIUM
Network 		imagely nextgen_gallery Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image … CWE-79
Cross-site Scripting 		CVE-2018-1000172 2024-11-21 12:39 2018-05-1 Show GitHub Exploit DB Packet Storm