Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
71 6.5 警告
Network 		Silicon Labs, Inc. emberznet Silicon Labs, Inc.のemberznetにおけるゼロ除算に関する脆弱性 New CWE-369
ゼロ除算 		CVE-2026-47152 2026-06-26 11:57 2026-06-25 Show GitHub Exploit DB Packet Storm
72 6.5 警告
Network 		Silicon Labs, Inc. emberznet Silicon Labs, Inc.のemberznetにおけるゼロ除算に関する脆弱性 New CWE-369
ゼロ除算 		CVE-2026-47153 2026-06-26 11:57 2026-06-25 Show GitHub Exploit DB Packet Storm
73 6.5 警告
Network 		Silicon Labs, Inc. emberznet Silicon Labs, Inc.のemberznetにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-47154 2026-06-26 11:57 2026-06-25 Show GitHub Exploit DB Packet Storm
74 6.5 警告
Network 		vLLM vLLM vLLMにおけるデータの信頼性についての不十分な検証に関する脆弱性 New CWE-345
データの信頼性についての不十分な検証 		CVE-2026-47155 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
75 8.1 重要
Network 		Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-47339 2026-06-26 11:57 2026-06-19 Show GitHub Exploit DB Packet Storm
76 6.5 警告
Network 		Apache Software Foundation APISIX Apache Software FoundationのAPISIXにおけるCapture-replay による認証回避に関する脆弱性 New CWE-294
Capture-replayによる認証回避 		CVE-2026-47341 2026-06-26 11:57 2026-06-19 Show GitHub Exploit DB Packet Storm
77 9.9 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Dynamics 365 Elevation of Privilege Vulnerability New CWE-284
不適切なアクセス制御 		CVE-2026-47647 2026-06-26 11:57 2026-06-18 Show GitHub Exploit DB Packet Storm
78 8.2 重要
Network 		MessagePack MessagePack MessagePackにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-48109 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
79 7.5 重要
Network 		MessagePack MessagePack MessagePackにおける複数の脆弱性 New CWE-1188
CWE-125
CWE-190
CWE-407
CWE-409
CWE-470
CWE-502
CWE-674
CWE-789
CVE-2026-48502 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
80 7.5 重要
Network 		MessagePack MessagePack MessagePackにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-48506 2026-06-26 11:57 2026-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254291 7.5 HIGH
Network 		lightsaml lightsaml LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-1000165 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254292 7.5 HIGH
Network 		gunicorn
debian 		gunicorn
debian_linux 		gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an atta… CWE-93
CRLF Injection 		CVE-2018-1000164 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254293 6.1 MEDIUM
Network 		projectfloodlight floodlight Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploit… CWE-79
Cross-site Scripting 		CVE-2018-1000163 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254294 6.1 MEDIUM
Network 		parsedown parsedown Parsedown version prior to 1.7.0 contains a Cross Site Scripting (XSS) vulnerability in `setMarkupEscaped` for escaping HTML that can result in JavaScript code execution. This attack appears to be ex… CWE-79
Cross-site Scripting 		CVE-2018-1000162 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254295 5.7 MEDIUM
Network 		nmap nmap nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is runn… CWE-22
Path Traversal 		CVE-2018-1000161 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254296 6.1 MEDIUM
Network 		risingstack protect RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in dangerous XSS strings being validated as s… CWE-79
Cross-site Scripting 		CVE-2018-1000160 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254297 8.8 HIGH
Network 		cmsmadesimple cms_made_simple cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of send_recovery_email in the line "$url = $config['admin_url'] . '/login.php?recoverme=' . $code;" that … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-1000158 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254298 7.8 HIGH
Local 		oisf suricata-update OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 … CWE-502
 Deserialization of Untrusted Data 		CVE-2018-1000167 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254299 5.9 MEDIUM
Network 		tlslite-ng_project tlslite-ng tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlsli… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2018-1000159 2024-11-21 12:39 2018-04-19 Show GitHub Exploit DB Packet Storm
254300 5.4 MEDIUM
Network 		jenkins jenkins A cross-site scripting vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in confirmationList.jelly and stopButton.jelly that allows attackers with Job/Configure and/or Job/Creat… CWE-79
Cross-site Scripting 		CVE-2018-1000170 2024-11-21 12:39 2018-04-16 Show GitHub Exploit DB Packet Storm