Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221261 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS における重要なユーザおよびグループ情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2014-3277 2014-06-2 14:21 2014-05-28 Show GitHub Exploit DB Packet Storm
221262 4.3 警告 Apache Software Foundation - Apache HBase における双方向認証を無効にされる脆弱性 CWE-287
不適切な認証 		CVE-2013-2193 2014-06-2 14:14 2013-07-4 Show GitHub Exploit DB Packet Storm
221263 5 警告 レッドハット - FreeIPA のデフォルトの LDAP ACI におけるクロスレルムの Kerberos Trust 鍵を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0199 2014-06-2 14:05 2013-01-23 Show GitHub Exploit DB Packet Storm
221264 6.5 警告 Sharetronix - Sharetronix における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3415 2014-06-2 11:48 2014-05-28 Show GitHub Exploit DB Packet Storm
221265 6.8 警告 Sharetronix - Sharetronix におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-3414 2014-06-2 11:47 2014-05-28 Show GitHub Exploit DB Packet Storm
221266 4.3 警告 SOSreport project - SOSreport における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-0246 2014-06-2 11:33 2014-05-27 Show GitHub Exploit DB Packet Storm
221267 6.8 警告 IBM - IBM Notes で使用される Autonomy KeyView IDOL の .mdb パーサにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-6349 2014-05-30 18:19 2013-03-21 Show GitHub Exploit DB Packet Storm
221268 7.5 危険 日本電気
IBM
アップル
Mozilla Foundation
Google
フェンリル株式会社
レッドハット		 - libpng における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3026 2014-05-30 18:11 2012-02-15 Show GitHub Exploit DB Packet Storm
221269 7.8 危険 IBM - IBM Lotus Domino の IMAP サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-0822 2014-05-30 16:21 2014-02-5 Show GitHub Exploit DB Packet Storm
221270 7.1 危険 IBM - IBM Lotus Protector for Mail Security の Admin Web UI における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-0887 2014-05-30 15:51 2014-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3421 4.8 MEDIUM
Network 		jetbrains teamcity In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible CWE-79
Cross-site Scripting 		CVE-2026-49381 2026-06-2 21:36 2026-05-30 Show GitHub Exploit DB Packet Storm
3422 5.5 MEDIUM
Local 		synology storage_manager A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive inf… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2026-2237 2026-06-2 19:16 2026-05-27 Show GitHub Exploit DB Packet Storm
3423 7.5 HIGH
Network 		jetbrains teamcity In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-49372 2026-06-2 13:07 2026-05-30 Show GitHub Exploit DB Packet Storm
3424 8.2 HIGH
Network 		jetbrains teamcity In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible CWE-79
Cross-site Scripting 		CVE-2026-49371 2026-06-2 13:06 2026-05-30 Show GitHub Exploit DB Packet Storm
3425 7.5 HIGH
Network 		- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.220, the email processing pipeline in FreeScout's FetchEmails command has two code paths for identifyin… CWE-290
CWE-345
 Authentication Bypass by Spoofing
 Insufficient Verification of Data Authenticity 		CVE-2026-47123 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3426 8.2 HIGH
Network 		- - form-data-objectizer converts FormData to object. Prior to 1.0.1, form-data-objectizer walks bracket-notation form keys (e.g. name[sub]) into nested objects without filtering __proto__, constructor, … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-46510 2026-06-2 12:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3427 8.8 HIGH
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteRegistry function in Dokploy (packages/server/src/services/registry.ts) executes docker logout ${respon… CWE-78
OS Command  		CVE-2026-45662 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3428 9.9 CRITICAL
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokploy v0.26.5 that allows authenticated users to write arbitr… CWE-22
CWE-35
Path Traversal
 Path Traversal: '.../...//' 		CVE-2026-45661 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3429 9.9 CRITICAL
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the /listen-deployment WebSocket endpoint allows any organization member to… CWE-78
OS Command  		CVE-2026-45629 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3430 7.5 HIGH
Network 		yhirose cpp-httplib cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.43.4, negative chunk-size in chunked Transfer-Encoding causes unbounded memory allocation and process cras… CWE-20
CWE-770
CWE-1285
 Improper Input Validation 
 Allocation of Resources Without Limits or Throttling
 Improper Validation of Specified Index, Position, or Offset in Input 		CVE-2026-45352 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm