Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229411 10 危険 マイクロソフト - Microsoft Publisher 2003 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1320 2013-05-20 18:21 2013-05-14 Show GitHub Exploit DB Packet Storm
229412 9.3 危険 マイクロソフト - Microsoft Publisher 2003 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1321 2013-05-20 18:20 2013-05-14 Show GitHub Exploit DB Packet Storm
229413 10 危険 マイクロソフト - Microsoft Publisher 2003 における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2013-1322 2013-05-20 18:17 2013-05-14 Show GitHub Exploit DB Packet Storm
229414 9.3 危険 マイクロソフト - Microsoft Publisher 2003 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1323 2013-05-20 18:11 2013-05-14 Show GitHub Exploit DB Packet Storm
229415 9.3 危険 マイクロソフト - Microsoft Publisher 2003 における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2013-1327 2013-05-20 18:08 2013-05-14 Show GitHub Exploit DB Packet Storm
229416 9.3 危険 マイクロソフト - Microsoft Publisher 製品における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2013-1328 2013-05-20 18:05 2013-05-14 Show GitHub Exploit DB Packet Storm
229417 7.2 危険 マイクロソフト - Microsoft Windows 7 のカーネルモードドライバの win32k.sys におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1333 2013-05-20 17:47 2013-05-14 Show GitHub Exploit DB Packet Storm
229418 6.8 警告 アップル - Apple Safari 6.0.3 未満などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0961 2013-05-20 16:59 2013-03-15 Show GitHub Exploit DB Packet Storm
229419 6.8 警告 アップル - Apple Safari 6.0.3 未満などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0960 2013-05-20 16:52 2013-03-15 Show GitHub Exploit DB Packet Storm
229420 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0959 2013-05-20 16:42 2013-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1691 - - - @microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API clients. In versions 1.0.0-preview.97 through 1.0.0-preview.101, `@microsoft/kiota-http-fetchlibrary`'s `Redir… New CWE-178
CWE-200
 Improper Handling of Case Sensitivity
Information Exposure 		CVE-2026-49336 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
1692 7.1 HIGH
Network 		- - gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit `6dd71e6a3c966867ef8c900d359a7df75789f410` added an ownership check based on `pla… New CWE-22
CWE-639
Path Traversal
 Authorization Bypass Through User-Controlled Key 		CVE-2026-49339 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
1693 6.5 MEDIUM
Network 		- - Kestra is an open-source, event-driven orchestration platform. Prior to versions 1.3.19, 1.2.19, 1.1.19, and 1.0.43, Kestra task `inputFiles` writes rendered file names directly under the task workin… New CWE-22
Path Traversal 		CVE-2026-48129 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
1694 4.3 MEDIUM
Network 		- - libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes `decoder_context::read_slice_NAL()` (`libde265/decctx.cc:481`… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-49337 2026-06-24 00:44 2026-06-20 Show GitHub Exploit DB Packet Storm
1695 - - - launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path… New CWE-73
CWE-522
 External Control of File Name or Path
 Insufficiently Protected Credentials 		CVE-2026-53632 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
1696 5.3 MEDIUM
Network 		- - @astrojs/netlify is an adapter that allows Astro to deploy your hybrid or server rendered site to Netlify. Prior to 7.0.13, @astrojs/netlify converts Astro image.remotePatterns into Netlify Image CDN… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-54300 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
1697 - - - Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause denial of service. Plug.Conn.Query.decode/4 (and Plug.Conn.Query.decode_each/2… New CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-54892 2026-06-24 00:44 2026-06-23 Show GitHub Exploit DB Packet Storm
1698 - - - An HTML injection vulnerability exists in the Google Chat webhook notification  sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An attacker can insert l… New CWE-74
Injection 		CVE-2026-12888 2026-06-24 00:42 2026-06-22 Show GitHub Exploit DB Packet Storm
1699 6.8 MEDIUM
Local 		- - The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously… New CWE-415
 Double Free 		CVE-2026-56109 2026-06-24 00:42 2026-06-23 Show GitHub Exploit DB Packet Storm
1700 5.3 MEDIUM
Network 		- - Versions of the package ts-deepmerge before 8.0.0 are vulnerable to Uncaught Exception due to the improper handling of built-in Object.prototype methods (such as toString, valueOf). When user-control… New CWE-248
 Uncaught Exception 		CVE-2026-12644 2026-06-24 00:42 2026-06-19 Show GitHub Exploit DB Packet Storm