Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
171	7.8	重要 Local	NSA	Ghidra	NSAのGhidraにおける引数の挿入または変更に関する脆弱性 New	CWE-88 引数の挿入または変更	CVE-2026-52750	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

172	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-52751	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

173	7.8	重要 Local	NSA	Ghidra	NSAのGhidraにおけるパストラバーサルの脆弱性 New	CWE-22 パス・トラバーサル	CVE-2026-52752	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

174	5.5	警告 Local	NSA	Ghidra	NSAのGhidraにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 New	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-52753	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

175	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおけるデジタル署名の検証に関する脆弱性 New	CWE-347 デジタル署名の不適切な検証	CVE-2026-52754	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

176	7.8	重要 Local	NSA	Ghidra	NSAのGhidraにおけるパストラバーサルの脆弱性 New	CWE-22 パス・トラバーサル	CVE-2026-52755	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

177	6.5	警告 Network	NSA	Ghidra	NSAのGhidraにおけるパストラバーサルの脆弱性 New	CWE-22 パス・トラバーサル	CVE-2026-52756	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

178	4.4	警告 Local	NSA	Ghidra	NSAのGhidraにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-52757	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

179	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおけるSQL インジェクションの脆弱性 New	CWE-89 SQLインジェクション	CVE-2026-52758	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

180	5.5	警告 Local	NSA	Ghidra	NSAのGhidraにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 New	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-52759	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2471	7.3	HIGH Network	securly	securly	Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.	CWE-798 Use of Hard-coded Credentials	CVE-2026-8876	2026-06-5 03:42	2026-06-4	Show	GitHub Exploit DB Packet Storm

2472	7.5	HIGH Network	securly	securly	Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that…	CWE-326 Inadequate Encryption Strength	CVE-2026-8878	2026-06-5 03:42	2026-06-4	Show	GitHub Exploit DB Packet Storm

2473	7.5	HIGH Network	securly	securly	Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime. This script is NOT declared in manif…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-8879	2026-06-5 03:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

2474	6.5	MEDIUM Network	libxls_project	libxls	libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not ful…	CWE-457 Use of Uninitialized Variable	CVE-2026-26824	2026-06-5 03:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

2475	7.7	HIGH Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-46447	2026-06-5 03:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

2476	4.9	MEDIUM Network	openstack	ironic	OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-44917	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

2477	8.1	HIGH Network	openstack	ironic	OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.	CWE-23 Relative Path Traversal	CVE-2026-48681	2026-06-5 03:40	2026-06-4	Show	GitHub Exploit DB Packet Storm

2478	5.9	MEDIUM Local	libexpat_project	libexpat	libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.…	CWE-416 Use After Free	CVE-2026-50219	2026-06-5 03:39	2026-06-4	Show	GitHub Exploit DB Packet Storm

2479	7.5	HIGH Network	solarwinds	web_help_desk	SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-28299	2026-06-5 03:39	2026-06-3	Show	GitHub Exploit DB Packet Storm

2480	4.3	MEDIUM Network	hcltech	icontrol	HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain…	CWE-209 Information Exposure Through an Error Message	CVE-2025-52606	2026-06-5 03:38	2026-06-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed