Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
210701 1.9 注意 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される PicketBox における管理暗号鍵を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-1921 2015-08-6 16:18 2013-09-4 Show GitHub Exploit DB Packet Storm
210702 7.5 危険 Apache Software Foundation - Apache Solr の XSLT 用 UpdateRequestHandler または XPathEntityProcessor における脆弱性 CWE-noinfo
情報不足
CVE-2012-6612 2015-08-6 16:14 2012-09-27 Show GitHub Exploit DB Packet Storm
210703 10 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の mozilla::DOMSVGLength::GetTearOff 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-1563 2015-08-6 16:09 2014-09-2 Show GitHub Exploit DB Packet Storm
210704 5 警告 Ruby on Rails project - Ruby on Rails の Action View の actionpack/lib/action_view/lookup_context.rb におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6414 2015-08-6 16:04 2013-12-3 Show GitHub Exploit DB Packet Storm
210705 10 危険 GE Healthcare - GE Healthcare Optima MR360 におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-5308 2015-08-6 14:54 2015-07-10 Show GitHub Exploit DB Packet Storm
210706 10 危険 GE Healthcare - GE Healthcare Centricity Clinical Archive Audit Trail Repository における脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-9736 2015-08-6 11:51 2015-07-10 Show GitHub Exploit DB Packet Storm
210707 10 危険 GE Healthcare - GE Healthcare Centricity DMS の Ad Hoc Reporting 機能における脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-7405 2015-08-6 11:31 2015-07-10 Show GitHub Exploit DB Packet Storm
210708 10 危険 GE Healthcare - GE Healthcare Centricity PACS-IW で使用される TeraRecon サーバにおける脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-5324 2015-08-6 11:22 2015-07-10 Show GitHub Exploit DB Packet Storm
210709 10 危険 GE Healthcare - GE Healthcare Centricity PACS-IW における脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-5323 2015-08-6 11:20 2015-07-10 Show GitHub Exploit DB Packet Storm
210710 10 危険 GE Healthcare - GE Healthcare Infinia II における脆弱性 CWE-255
証明書・パスワード管理
CVE-2006-7253 2015-08-6 11:13 2015-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2231 6.5 MEDIUM
Network
elastic kibana Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentiall… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42399 2026-06-1 23:14 2026-05-29 Show GitHub Exploit DB Packet Storm
2232 6.5 MEDIUM
Network
elastic kibana Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42400 2026-06-1 23:13 2026-05-29 Show GitHub Exploit DB Packet Storm
2233 7.7 HIGH
Network
elastic kibana Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server t… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-49093 2026-06-1 23:13 2026-05-29 Show GitHub Exploit DB Packet Storm
2234 7.8 HIGH
Local
jetbrains intellij_idea In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-49382 2026-06-1 22:59 2026-05-30 Show GitHub Exploit DB Packet Storm
2235 7.8 HIGH
Local
jetbrains intellij_idea In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion CWE-78
OS Command 
CVE-2026-49366 2026-06-1 22:59 2026-05-30 Show GitHub Exploit DB Packet Storm
2236 3.3 LOW
Local
jetbrains intellij_idea In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible CWE-611
XXE
CVE-2026-49383 2026-06-1 22:58 2026-05-30 Show GitHub Exploit DB Packet Storm
2237 8.8 HIGH
Network
jetbrains intellij_idea In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account CWE-862
 Missing Authorization
CVE-2026-49367 2026-06-1 22:56 2026-05-30 Show GitHub Exploit DB Packet Storm
2238 6.5 MEDIUM
Network
elastic kibana Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containin… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-49094 2026-06-1 22:31 2026-05-29 Show GitHub Exploit DB Packet Storm
2239 6.5 MEDIUM
Network
elastic kibana Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges can manipulate agent po… CWE-20
 Improper Input Validation 
CVE-2026-49095 2026-06-1 22:30 2026-05-29 Show GitHub Exploit DB Packet Storm
2240 7.8 HIGH
Local
canonical multipass An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199. While the patch in version 1.16.0 updated the ownership of the multipassd da… CWE-276
Incorrect Default Permissions 
CVE-2026-49237 2026-06-1 22:27 2026-05-28 Show GitHub Exploit DB Packet Storm