Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231181 10 危険 ヒューレット・パッカード - HP Diagnostics Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3278 2013-01-29 16:43 2013-01-22 Show GitHub Exploit DB Packet Storm
231182 5.8 警告 Novell - WebYaST にホスト一覧を改ざんされる脆弱性 CWE-noinfo
情報不足
CVE-2012-0435 2013-01-29 14:10 2013-01-28 Show GitHub Exploit DB Packet Storm
231183 10 危険 IBM - IBM WebSphere Application Server における脆弱性 CWE-noinfo
情報不足
CVE-2013-0462 2013-01-29 11:49 2013-01-23 Show GitHub Exploit DB Packet Storm
231184 4.3 警告 IBM - IBM WebSphere Application Server の Virtual Member Manager 管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0461 2013-01-29 11:49 2013-01-23 Show GitHub Exploit DB Packet Storm
231185 6.8 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0460 2013-01-29 11:48 2013-01-23 Show GitHub Exploit DB Packet Storm
231186 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0459 2013-01-29 11:47 2013-01-23 Show GitHub Exploit DB Packet Storm
231187 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0458 2013-01-29 11:47 2013-01-23 Show GitHub Exploit DB Packet Storm
231188 4.3 警告 TP-LINK Technologies - TL-WR841N に情報漏えいの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-6276 2013-01-29 10:37 2013-01-15 Show GitHub Exploit DB Packet Storm
231189 7.1 危険 ISC, Inc. - ISC BIND におけるサービス運用妨害 (表明違反および named デーモンの終了) の脆弱性 CWE-DesignError
CVE-2012-5689 2013-01-28 16:02 2013-01-24 Show GitHub Exploit DB Packet Storm
231190 9 危険 シスコシステムズ - Cisco Wireless LAN Controller における無線管理の設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1105 2013-01-28 16:01 2013-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1381 5.4 MEDIUM
Network
jenkins assembla A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and pa… CWE-862
 Missing Authorization
CVE-2026-57304 2026-06-26 03:46 2026-06-24 Show GitHub Exploit DB Packet Storm
1382 7.1 HIGH
Network
jenkins assembla Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla ser… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-57303 2026-06-26 03:45 2026-06-24 Show GitHub Exploit DB Packet Storm
1383 7.5 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompre… CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-54314 2026-06-26 03:42 2026-06-24 Show GitHub Exploit DB Packet Storm
1384 7.7 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace opera… CWE-89
SQL Injection
CVE-2026-54313 2026-06-26 03:42 2026-06-24 Show GitHub Exploit DB Packet Storm
1385 8.5 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-54312 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1386 7.7 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used by the Merge node's … CWE-488
 Exposure of Data Element to Wrong Session
CVE-2026-54311 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1387 9.9 CRITICAL
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleD… CWE-89
SQL Injection
CVE-2026-54310 2026-06-26 03:41 2026-06-24 Show GitHub Exploit DB Packet Storm
1388 10.0 CRITICAL
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint accepts session initialization and tool invocatio… CWE-306
Missing Authentication for Critical Function
CVE-2026-54309 2026-06-26 03:40 2026-06-24 Show GitHub Exploit DB Packet Storm
1389 5.4 MEDIUM
Network
n8n n8n n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response without sanitization o… CWE-79
Cross-site Scripting
CVE-2026-54303 2026-06-26 03:39 2026-06-24 Show GitHub Exploit DB Packet Storm
1390 5.5 MEDIUM
Local
nuxt nuxt Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to an abstract-namespace Unix socket without permission restr… CWE-276
Incorrect Default Permissions 
CVE-2026-56301 2026-06-26 03:39 2026-06-23 Show GitHub Exploit DB Packet Storm