Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1381	5.5	警告 Local	ERLANG	Erl Interface Erlang/OTP	ERLANGのErl Interface等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-49760	2026-06-16 13:40	2026-06-10	Show	GitHub Exploit DB Packet Storm

1382	5.7	警告 Adjacent	nuxt	nuxt/webpack-builder nuxt/rspack-builder	Nuxtのnuxt/rspack-builder等の複数製品における危険なメソッドや機能の公開に関する脆弱性	CWE-749 危険なメソッドや機能の公開	CVE-2026-49993	2026-06-16 13:39	2026-06-12	Show	GitHub Exploit DB Packet Storm

1383	9.8	緊急 Network	jmespath project	jmespath	JMESPathにおける複数の脆弱性	CWE-116 CWE-20 CWE-94	CVE-2026-54133	2026-06-16 13:39	2026-06-12	Show	GitHub Exploit DB Packet Storm

1384	5.5	警告 Local		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-24165	2026-06-16 13:39	2026-06-11	Show	GitHub Exploit DB Packet Storm

1385	5.5	警告 Local		-	アップルのmacOSにおけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2025-43278	2026-06-16 13:39	2026-06-11	Show	GitHub Exploit DB Packet Storm

1386	5.5	警告 Local		-	アップルのmacOSにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2025-46313	2026-06-16 13:39	2026-06-11	Show	GitHub Exploit DB Packet Storm

1387	7.2	重要 Network	QNAP Systems	QuTS hero	QNAP SystemsのQuTS heroにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-62850	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

1388	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-66273	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

1389	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-66279	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

1390	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品における複数の脆弱性	CWE-121 CWE-190	CVE-2025-66280	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3941	-		-	-	Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages (.dsc) and upload artifacts (.changes) are manifest files that name the files …	-	CVE-2026-11853	2026-06-10 19:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3942	-		-	-	Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Files managed by debusine are organized into artifacts. The endpoints that create and delete relation…	-	CVE-2026-11852	2026-06-10 19:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3943	-		-	-	Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP objec…	CWE-502 Deserialization of Untrusted Data	CVE-2026-10721	2026-06-10 17:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3944	-		-	-	A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexp…	CWE-617 Reachable Assertion	CVE-2026-29116	2026-06-10 16:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3945	-		-	-	A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpec…	CWE-617 Reachable Assertion	CVE-2026-29115	2026-06-10 16:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3946	-		-	-	A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudul…	CWE-538 File and Directory Information Exposure	CVE-2026-29114	2026-06-10 16:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3947	-		-	-	An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken …	CWE-502 Deserialization of Untrusted Data	CVE-2026-11815	2026-06-10 16:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3948	7.3	HIGH Local	-	-	A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOL…	CWE-59 Link Following	CVE-2026-11837	2026-06-10 14:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

3949	2.4	LOW Network	-	-	A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cross site scripting.…	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-11434	2026-06-10 14:16	2026-06-7	Show	GitHub Exploit DB Packet Storm

3950	-		-	-	A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities…	CWE-352 Origin Validation Error	CVE-2025-58468	2026-06-10 12:16	2026-06-10	Show	GitHub Exploit DB Packet Storm