Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
811 8.8 重要
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-7387 2026-06-22 11:46 2026-06-12 Show GitHub Exploit DB Packet Storm
812 6.5 警告
Adjacent 		TP-LINK Technologies Tapo C520WS Firmware TP-LINK TechnologiesのTapo C520WS Firmwareにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-8714 2026-06-22 11:46 2026-06-5 Show GitHub Exploit DB Packet Storm
813 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-9741 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
814 5.9 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性 CWE-1287
指定されたタイプの入力に対する不適切な検証 		CVE-2026-9742 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
815 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-9746 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
816 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-9749 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
817 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-9752 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
818 8.1 重要
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける複数の脆弱性 CWE-1287
CWE-787
CVE-2026-9753 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
819 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける初期化されていない変数の使用に関する脆弱性 CWE-457
初期化されていない変数の使用 		CVE-2026-9754 2026-06-22 11:46 2026-06-9 Show GitHub Exploit DB Packet Storm
820 7.8 重要
Local 		Google Android GoogleのAndroidにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-0143 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254131 7.8 HIGH
Local 		artifex
canonical
debian
redhat 		ghostscript
ubuntu_linux
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_server_aus
ent… 		The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-10194 2024-11-21 12:40 2018-04-19 Show GitHub Exploit DB Packet Storm
254132 5.3 MEDIUM
Network 		iac fromdoctopdf The FromDocToPDF extension before 13.611.13.2303 for Chrome allows remote attackers to discover visited web sites via vectors involving a mostVisitedSites command. CWE-200
Information Exposure 		CVE-2018-10178 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254133 6.5 MEDIUM
Network 		imagemagick
canonical 		imagemagick
ubuntu_linux 		In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a craf… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2018-10177 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254134 8.8 HIGH
Local 		7-zip 7-zip 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it … CWE-269
 Improper Privilege Management 		CVE-2018-10172 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254135 7.5 HIGH
Network 		mikrotik router_firmware A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins wi… CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-10070 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254136 6.1 MEDIUM
Network 		catalooksupport .netstore The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter. CWE-79
Cross-site Scripting 		CVE-2018-10138 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254137 8.8 HIGH
Network 		iscripts uberforx iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI. CWE-352
 Origin Validation Error 		CVE-2018-10137 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254138 6.1 MEDIUM
Network 		iscripts uberforx iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI. CWE-79
Cross-site Scripting 		CVE-2018-10136 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254139 6.1 MEDIUM
Network 		iscripts eswap iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel. CWE-79
Cross-site Scripting 		CVE-2018-10135 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm
254140 9.8 CRITICAL
Network 		pbootcms pbootcms PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \apps\home\controller\ParserController.php. CWE-94
Code Injection 		CVE-2018-10133 2024-11-21 12:40 2018-04-17 Show GitHub Exploit DB Packet Storm