Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213611 4 警告 PHP工房 - 「【Gallery01】PC、スマホ、ガラケー3デバイス対応写真ギャラリーCMS フリー(無料)版」におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2982 2015-08-26 17:38 2015-08-12 Show GitHub Exploit DB Packet Storm
213612 2.6 注意 PHP工房 - 「【Gallery01】PC、スマホ、ガラケー3デバイス対応写真ギャラリーCMS フリー(無料)版」におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-2983 2015-08-26 17:28 2015-08-12 Show GitHub Exploit DB Packet Storm
213613 3.5 注意 DELL EMC (旧 EMC Corporation) - EMC Documentum D2 の Lockbox における管理者のチケットを復号される脆弱性 CWE-200
情報漏えい
CVE-2015-4537 2015-08-26 16:44 2015-08-20 Show GitHub Exploit DB Packet Storm
213614 5 警告 シスコシステムズ - Cisco Wireless LAN Controller デバイスのソフトウェア上で稼動する Internet Access Point Protocol モジュールにおける不正なトラフィック転送を誘発される脆弱性 CWE-20
不適切な入力確認
CVE-2015-6258 2015-08-26 16:24 2015-08-21 Show GitHub Exploit DB Packet Storm
213615 5 警告 シスコシステムズ - Cisco ASR 5000 デバイスのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-6256 2015-08-26 16:24 2015-08-20 Show GitHub Exploit DB Packet Storm
213616 3.5 注意 シスコシステムズ - Cisco Prime Infrastructure におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-4331 2015-08-26 16:24 2015-08-20 Show GitHub Exploit DB Packet Storm
213617 6.8 警告 Actiontec Electronics, Inc. - Actiontec GT784WN モデムのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-2905 2015-08-26 16:20 2015-08-11 Show GitHub Exploit DB Packet Storm
213618 8.3 危険 Actiontec Electronics, Inc. - Actiontec GT784WN モデムのファームウェアにおける root アクセス権を取得される脆弱性 CWE-Other
その他
CVE-2015-2904 2015-08-26 16:10 2015-08-11 Show GitHub Exploit DB Packet Storm
213619 6 警告 ヒューレット・パッカード - 複数の HP CentralView 製品における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2015-5408 2015-08-26 15:51 2015-08-12 Show GitHub Exploit DB Packet Storm
213620 6 警告 ヒューレット・パッカード - 複数の HP CentralView 製品における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2015-5407 2015-08-26 15:51 2015-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
741 9.1 CRITICAL
Network
ibm storage_protect IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker to bypass authentication due to the use of a hard… CWE-798
 Use of Hard-coded Credentials
CVE-2026-12628 2026-06-27 05:01 2026-06-23 Show GitHub Exploit DB Packet Storm
742 5.5 MEDIUM
Local
rubyconcurrency concurrent_ruby concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The… CWE-128
 Wrap-around Error
CVE-2026-54905 2026-06-27 05:01 2026-06-25 Show GitHub Exploit DB Packet Storm
743 9.8 CRITICAL
Network
rubyconcurrency concurrent_ruby concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with a… CWE-414
CWE-667
 Missing Lock Check
 Improper Locking
CVE-2026-54906 2026-06-27 05:00 2026-06-25 Show GitHub Exploit DB Packet Storm
744 4.8 MEDIUM
Network
jenkins bitbucket_push_and_pull_request Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to th… CWE-295
Improper Certificate Validation 
CVE-2026-57289 2026-06-27 04:59 2026-06-24 Show GitHub Exploit DB Packet Storm
745 4.3 MEDIUM
Network
jenkins github_branch_source A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers con… CWE-862
 Missing Authorization
CVE-2026-57285 2026-06-27 04:59 2026-06-24 Show GitHub Exploit DB Packet Storm
746 8.8 HIGH
Network
jenkins script_security Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each loops in sandboxed Groovy scripts, allowing attacker… CWE-693
 Protection Mechanism Failure
CVE-2026-57280 2026-06-27 04:59 2026-06-24 Show GitHub Exploit DB Packet Storm
747 4.3 MEDIUM
Network
hono hono hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attackers can craft speci… CWE-79
Cross-site Scripting
CVE-2026-56761 2026-06-27 04:59 2026-06-24 Show GitHub Exploit DB Packet Storm
748 7.5 HIGH
Network
docling docling Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP … CWE-22
Path Traversal
CVE-2026-44017 2026-06-27 04:58 2026-06-25 Show GitHub Exploit DB Packet Storm
749 7.5 HIGH
Network
docling docling Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the USPTO patent XML parser used the standard … CWE-776
XML Entity Expansion
CVE-2026-44020 2026-06-27 04:58 2026-06-25 Show GitHub Exploit DB Packet Storm
750 5.5 MEDIUM
Local
docling docling Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphic… CWE-22
Path Traversal
CVE-2026-44022 2026-06-27 04:58 2026-06-25 Show GitHub Exploit DB Packet Storm