Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207671 5.6 警告 VMware
Linux
- Linux kernel の is_gpt_valid 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2011-1776 2016-06-30 14:07 2011-09-6 Show GitHub Exploit DB Packet Storm
207672 5.7 警告 VMware
Linux
レッドハット
- Red Hat Enterprise Linux 5 の Linux kernel および Red Hat Enterprise Linux 6 の GRO におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-1576 2016-06-30 14:07 2011-07-27 Show GitHub Exploit DB Packet Storm
207673 2.1 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の do_task_stat 関数における ASLR プロテクション機構を無効化される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0726 2016-06-30 14:07 2011-05-31 Show GitHub Exploit DB Packet Storm
207674 8.1 重要
Network
IBM - IBM Domino の Java コンソールにおける認証を回避される脆弱性 CWE-Other
その他
CVE-2016-0304 2016-06-30 13:38 2016-05-26 Show GitHub Exploit DB Packet Storm
207675 6.5 警告
Network
IBM - IBM Security Guardium Database Activity Monitor におけるディレクトリトラバーサルの脆弱性 CWE-200
情報漏えい
CVE-2016-0298 2016-06-30 13:38 2016-06-6 Show GitHub Exploit DB Packet Storm
207676 7.7 重要
Network
IBM - IBM UrbanCode Deploy における重要な平文のセキュアなプロパティ情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0267 2016-06-30 13:38 2016-05-26 Show GitHub Exploit DB Packet Storm
207677 7 重要
Local
IBM - IBM Spectrum Scale および General Parallel File System における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0263 2016-06-30 13:38 2016-04-2 Show GitHub Exploit DB Packet Storm
207678 8.8 重要
Network
Opera Software ASA - Windows 上で稼動する Opera Mail における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5101 2016-06-30 11:59 2016-02-16 Show GitHub Exploit DB Packet Storm
207679 5.5 警告
Local
Linux - Linux Kernel の nfsd におけるファイルパーミッションの制限を回避される脆弱性 CWE-Other
その他
CVE-2016-1237 2016-06-30 11:53 2016-06-23 Show GitHub Exploit DB Packet Storm
207680 7.8 重要
Local
Linux - Linux Kernel の ALSA サブシステムの sound/core/compress_offload.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2012-6703 2016-06-30 11:53 2012-09-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
551 7.8 HIGH
Local
- - rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the permission splitter did not conservatively split or reject several shell constructs that Bash treat… New CWE-863
 Incorrect Authorization
CVE-2026-54555 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
552 9.6 CRITICAL
Network
- - Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled `HTTP_HOST` request header as the authoritative source for buildin… New CWE-20
CWE-601
 Improper Input Validation 
Open Redirect
CVE-2026-54588 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
553 6.9 MEDIUM
Network
- - Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 are vulnerable to CSV Injection (Formula Injection) in its log export functionality. User-cont… New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2026-47693 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
554 8.8 HIGH
Local
- - Style Dictionary, a build system for creating cross-platform styles, has a prototype pollution vulnerability starting in version 4.3.0 and prior to version 5.4.4. Impact users have: direct usage of `… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-54639 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
555 - - - OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2, `FileFormatSpi3D.cpp:163` uses `sscanf` with `%s` into 64-byte stack buffers when parsing LUT dat… New CWE-120
Classic Buffer Overflow
CVE-2026-42450 2026-06-26 05:18 2026-06-24 Show GitHub Exploit DB Packet Storm
556 - - - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in parse_link_text. Whe… New CWE-400
CWE-407
CWE-770
 Uncontrolled Resource Consumption
 Inefficient Algorithmic Complexity
 Allocation of Resources Without Limits or Throttling
CVE-2026-49851 2026-06-26 05:18 2026-06-25 Show GitHub Exploit DB Packet Storm
557 - - - SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway construct their routers wit… New CWE-22
Path Traversal
CVE-2026-54917 2026-06-26 05:17 2026-06-26 Show GitHub Exploit DB Packet Storm
558 5.4 MEDIUM
Network
- - Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-53946 2026-06-26 05:17 2026-06-25 Show GitHub Exploit DB Packet Storm
559 - - - NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, with NC_SECURE_ATTACHMENTS=true, an authenticated uploader could deliver .html or .svg attachments that the browser rend… New CWE-79
Cross-site Scripting
CVE-2026-53929 2026-06-26 05:17 2026-06-24 Show GitHub Exploit DB Packet Storm
560 - - - SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). DPA Countermeasures … New CWE-331
 Insufficient Entropy
CVE-2026-4930 2026-06-26 05:17 2026-06-26 Show GitHub Exploit DB Packet Storm