Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1851	5.5	警告 Local	NSA	Ghidra	NSAのGhidraにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-52753	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1852	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-52754	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1853	7.8	重要 Local	NSA	Ghidra	NSAのGhidraにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-52755	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1854	6.5	警告 Network	NSA	Ghidra	NSAのGhidraにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-52756	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1855	4.4	警告 Local	NSA	Ghidra	NSAのGhidraにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-52757	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1856	8.8	重要 Network	NSA	Ghidra	NSAのGhidraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-52758	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1857	5.5	警告 Local	NSA	Ghidra	NSAのGhidraにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-52759	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1858	8.8	重要 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-53435	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1859	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-53436	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

1860	4.3	警告 Network	Jenkins プロジェクト	Jenkins	Jenkinsにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-53437	2026-06-12 14:45	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
991	4.3	MEDIUM Network	-	-	A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers con… New	CWE-862 Missing Authorization	CVE-2026-57285	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

992	4.3	MEDIUM Network	-	-	A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information about the SCM repository used by a job, such… New	CWE-862 Missing Authorization	CVE-2026-57286	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

993	4.3	MEDIUM Network	-	-	Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers w… New	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-57287	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

994	3.7	LOW Network	-	-	Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native (ADSI) authentication path, allowing unauthenticated atta… New	CWE-90 LDAP Injection	CVE-2026-57288	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

995	4.8	MEDIUM Network	-	-	Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to th… New	CWE-295 Improper Certificate Validation	CVE-2026-57289	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

996	4.3	MEDIUM Network	-	-	A cross-site request forgery (CSRF) vulnerability in Jenkins Priority Sorter Plugin 936.v2c01c6b_84449 and earlier allows attackers to overwrite the global job priority configuration. New	CWE-352 Origin Validation Error	CVE-2026-57290	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

997	5.4	MEDIUM Network	-	-	A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specif… New	CWE-862 Missing Authorization	CVE-2026-57294	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

998	5.4	MEDIUM Network	-	-	A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified cr… New	CWE-352 Origin Validation Error	CVE-2026-57295	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

999	4.3	MEDIUM Network	-	-	A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they can access. New	CWE-862 Missing Authorization	CVE-2026-57300	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm

1000	8.8	HIGH Network	-	-	Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary c… New	CWE-610 Externally Controlled Reference to a Resource in Another Sphere	CVE-2026-57301	2026-06-25 23:02	2026-06-24	Show	GitHub Exploit DB Packet Storm