Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 6.5 警告
Network 		PEVANS (Paul Evans ) Metrics::Any::Adapter::SignalFx PEVANS (Paul Evans )のMetrics::Any::Adapter::SignalFxにおける複数の脆弱性 New CWE-150
CWE-93
CVE-2026-50637
CVE-2026-50638
CVE-2026-50639
CVE-2026-9270 		2026-06-26 11:51 2026-06-10 Show GitHub Exploit DB Packet Storm
202 7.5 重要
Network 		Devolutions UniGetUI DevolutionsのUniGetUIにおける誤って解決された名前や参照の使用に関する脆弱性 New CWE-706
誤って解決された名前や参照の使用 		CVE-2026-10696 2026-06-26 11:51 2026-06-17 Show GitHub Exploit DB Packet Storm
203 7.8 重要
Local 		デル AIOps Collector デルのAIOps Collectorにおけるデフォルトの認証情報の使用に関する脆弱性 New CWE-1392
デフォルトの認証情報の使用 		CVE-2026-32652 2026-06-26 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
204 9.1 緊急
Network 		UI UniFi OS Server UIのUniFi OS Serverにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-33000 2026-06-26 11:50 2026-05-22 Show GitHub Exploit DB Packet Storm
205 7.7 重要
Network 		UI UniFi Dream Machine Special Edition Firmware (UDM-SE)
UniFi Cloud Gateway Ultra Firmware (UCG-Ultra)
UniFi Network Video Re… 		UIのEnterprise Fortress Gateway Firmware (EFG)等の複数製品におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-34911 2026-06-26 11:50 2026-05-22 Show GitHub Exploit DB Packet Storm
206 8.8 重要
Adjacent 		Palo Alto Networks IDIRA Privilege Cloud Connector Palo Alto NetworksのIDIRA Privilege Cloud Connectorにおける証明書検証に関する脆弱性 New CWE-295
不正な証明書検証 		CVE-2026-45170 2026-06-26 11:50 2026-06-12 Show GitHub Exploit DB Packet Storm
207 8.8 重要
Network 		Palo Alto Networks IDIRA Privileged Session Manager (PSM) Palo Alto NetworksのIDIRA Privileged Session Manager (PSM)におけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-45171 2026-06-26 11:50 2026-06-11 Show GitHub Exploit DB Packet Storm
208 8.8 重要
Network 		Palo Alto Networks Privileged Session Manager (PSM) Palo Alto NetworksのPrivileged Session Manager (PSM)におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-45172 2026-06-26 11:50 2026-06-11 Show GitHub Exploit DB Packet Storm
209 8.2 重要
Local 		マイクロソフト Microsoft MANA Network Driver Microsoft Azure ネットワーク アダプターの特権昇格の脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-45476 2026-06-26 11:50 2026-06-9 Show GitHub Exploit DB Packet Storm
210 7.8 重要
Local 		Leejet Stable-diffusion.cpp LeejetのStable-diffusion.cppにおける複数の脆弱性 New CWE-122
CWE-787
CVE-2026-47747 2026-06-26 11:50 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3611 7.3 HIGH
Network 		apache http_server Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are rec… CWE-126
 Buffer Over-read 		CVE-2026-44185 2026-06-11 13:01 2026-06-9 Show GitHub Exploit DB Packet Storm
3612 5.5 MEDIUM
Local 		apache http_server Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTT… CWE-269
 Improper Privilege Management 		CVE-2026-44119 2026-06-11 13:01 2026-06-9 Show GitHub Exploit DB Packet Storm
3613 6.5 MEDIUM
Network 		apache http_server Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. CWE-125
Out-of-bounds Read 		CVE-2026-43951 2026-06-11 13:00 2026-06-9 Show GitHub Exploit DB Packet Storm
3614 8.1 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the chatflow update endpoint of FlowiseAI. T… CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-42863 2026-06-11 12:58 2026-06-9 Show GitHub Exploit DB Packet Storm
3615 5.0 MEDIUM
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the tool update endpoint of FlowiseAI. The e… CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-42862 2026-06-11 12:56 2026-06-9 Show GitHub Exploit DB Packet Storm
3616 9.6 CRITICAL
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint of FlowiseAI. T… CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-42861 2026-06-11 12:53 2026-06-9 Show GitHub Exploit DB Packet Storm
3617 5.4 MEDIUM
Network 		microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting 		CVE-2026-45468 2026-06-11 11:43 2026-06-10 Show GitHub Exploit DB Packet Storm
3618 4.3 MEDIUM
Network 		buffalo open_xdmod OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request… CWE-284
NVD-CWE-noinfo
Improper Access Control 		CVE-2026-45776 2026-06-11 06:07 2026-06-6 Show GitHub Exploit DB Packet Storm
3619 9.8 CRITICAL
Network 		buffalo open_xdmod OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web s… CWE-78
OS Command  		CVE-2026-45777 2026-06-11 06:06 2026-06-6 Show GitHub Exploit DB Packet Storm
3620 5.4 MEDIUM
Network 		buffalo open_xdmod OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attacker can inject malicious JavaScript into their Open XDMoD user profile and abus… CWE-79
Cross-site Scripting 		CVE-2026-45778 2026-06-11 06:05 2026-06-6 Show GitHub Exploit DB Packet Storm