Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190101 8.8 重要
Network 		Jenkins プロジェクト - Jenkins Favorite プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-1000244 2017-11-21 11:39 2017-06-6 Show GitHub Exploit DB Packet Storm
190102 4.3 警告
Network 		Jenkins プロジェクト - Jenkins Favorite プラグインにおけるパーミッションに関する脆弱性 CWE-275
パーミッションの問題 		CVE-2017-1000243 2017-11-21 11:39 2017-06-6 Show GitHub Exploit DB Packet Storm
190103 3.3 低
Local 		Jenkins プロジェクト - Jenkins Git Client プラグインにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-1000242 2017-11-21 11:39 2017-04-27 Show GitHub Exploit DB Packet Storm
190104 6.6 警告
Physics 		Linux - Linux Kernel における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-16538 2017-11-21 10:33 2017-09-26 Show GitHub Exploit DB Packet Storm
190105 6.6 警告
Physics 		Linux - Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-16537 2017-11-21 10:33 2017-10-9 Show GitHub Exploit DB Packet Storm
190106 9.8 緊急
Network 		Sokial - Sokial Social Network Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-15973 2017-11-20 16:52 2017-09-29 Show GitHub Exploit DB Packet Storm
190107 9.8 緊急
Network 		Adult Script Pro - Adult Script Pro における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-15959 2017-11-20 16:44 2017-09-29 Show GitHub Exploit DB Packet Storm
190108 9.8 緊急
Network 		softechproducts - SoftDatepro Dating Social Network における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-15972 2017-11-20 16:44 2017-09-29 Show GitHub Exploit DB Packet Storm
190109 6.6 警告
Physics 		Linux - Linux Kernel における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-16536 2017-11-20 16:34 2017-09-21 Show GitHub Exploit DB Packet Storm
190110 6.6 警告
Physics 		Linux - Linux Kernel における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-16535 2017-11-20 16:34 2017-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1641 5.9 MEDIUM
Network 		- - An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects an… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41710 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1642 6.1 MEDIUM
Network 		- - In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been e… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-41715 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1643 7.4 HIGH
Network 		- - Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password. Affected versions: Spring LDAP 2.4.0 … CWE-287
Improper Authentication 		CVE-2026-41720 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1644 4.2 MEDIUM
Network 		- - A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authent… CWE-384
 Session Fixation 		CVE-2026-41839 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1645 5.9 MEDIUM
Network 		- - Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-41840 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1646 5.9 MEDIUM
Network 		- - Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6… CWE-524
 Use of Cache Containing Sensitive Information 		CVE-2026-41841 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1647 7.5 HIGH
Network 		- - Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-41842 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1648 5.9 MEDIUM
Network 		- - Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 thr… CWE-22
Path Traversal 		CVE-2026-41843 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1649 7.5 HIGH
Network 		- - An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers … CWE-190
 Integer Overflow or Wraparound 		CVE-2026-41849 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
1650 7.5 HIGH
Network 		- - Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted expression, an attack… CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-41850 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm