Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207781	8.8	重要 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-4225	2016-07-15 16:42	2016-07-12	Show	GitHub Exploit DB Packet Storm

207782	8.8	重要 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-4224	2016-07-15 16:42	2016-07-12	Show	GitHub Exploit DB Packet Storm

207783	8.8	重要 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-4223	2016-07-15 16:42	2016-07-12	Show	GitHub Exploit DB Packet Storm

207784	8.8	重要 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-4222	2016-07-15 16:42	2016-07-12	Show	GitHub Exploit DB Packet Storm

207785	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4221	2016-07-15 16:40	2016-07-12	Show	GitHub Exploit DB Packet Storm

207786	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4220	2016-07-15 16:40	2016-07-12	Show	GitHub Exploit DB Packet Storm

207787	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4219	2016-07-15 16:40	2016-07-12	Show	GitHub Exploit DB Packet Storm

207788	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4218	2016-07-15 16:40	2016-07-12	Show	GitHub Exploit DB Packet Storm

207789	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4217	2016-07-15 16:40	2016-07-12	Show	GitHub Exploit DB Packet Storm

207790	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4190	2016-07-15 16:39	2016-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
661	7.5	HIGH Network	ibm	datacap datacap_navigator	IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys … New	CWE-316 Cleartext Storage of Sensitive Information in Memory	CVE-2026-8636	2026-06-27 06:20	2026-06-23	Show	GitHub Exploit DB Packet Storm

662	5.3	MEDIUM Network	ibm	datacap datacap_navigator	IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, … New	CWE-425 Direct Request ('Forced Browsing')	CVE-2026-9610	2026-06-27 06:19	2026-06-23	Show	GitHub Exploit DB Packet Storm

663	8.8	HIGH Network	misp-project	misp	The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees pro… New	CWE-384 Session Fixation	CVE-2026-56425	2026-06-27 05:33	2026-06-22	Show	GitHub Exploit DB Packet Storm

664	7.5	HIGH Network	vllm	vllm	vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can subm… New	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-56340	2026-06-27 05:29	2026-06-21	Show	GitHub Exploit DB Packet Storm

665	7.5	HIGH Network	vllm	vllm	vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Several regex patterns — in vllm/lora/utils.py, the phi4mini tool parser, and the Ope… New	CWE-1333 Inefficient Regular Expression Complexity	CVE-2025-71379	2026-06-27 05:25	2026-06-21	Show	GitHub Exploit DB Packet Storm

666	7.5	HIGH Network	-	-	Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unreviewed personal fork of a contributor with… New	CWE-494 Download of Code Without Integrity Check	CVE-2021-47987	2026-06-27 05:22	2026-06-26	Show	GitHub Exploit DB Packet Storm

667	5.4	MEDIUM Network	ibm	engineering_workflow_management	IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to … New	CWE-79 Cross-site Scripting	CVE-2025-33128	2026-06-27 05:20	2026-06-22	Show	GitHub Exploit DB Packet Storm

668	5.0	MEDIUM Network	jenkins	git_client	Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able to control the name… New	CWE-78 OS Command	CVE-2026-57282	2026-06-27 05:20	2026-06-24	Show	GitHub Exploit DB Packet Storm

669	5.9	MEDIUM Network	-	-	Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 and 23.0.0-beta.2, the local HTTP server started by nx graph sent Access-Control-Allow-Origin: * on every res… New	CWE-749 CWE-942 Exposed Dangerous Method or Function Permissive Cross-domain Policy with Untrusted Domains	CVE-2026-54753	2026-06-27 05:20	2026-06-27	Show	GitHub Exploit DB Packet Storm

670	7.5	HIGH Network	-	-	OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the journal diff endpoint discloses hidden historical field values without enforcing object and field vi… New	CWE-200 CWE-862 Information Exposure Missing Authorization	CVE-2026-47193	2026-06-27 05:20	2026-06-27	Show	GitHub Exploit DB Packet Storm