Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2321 7.8 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition
Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft&nb… 		Microsoft Word のリモートでコードが実行される脆弱性 CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-45643 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2322 8.4 重要
Local 		マイクロソフト Microsoft Office 2024 Long-Term Servicing Channel Edition Microsoft Outlook および Word のリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-47635 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2323 6.5 警告
Network 		ERLANG
chilkat software		 Erlang/OTP
Erlang/Inets (Inets)
ftp 		ERLANGのErlang/Inets (Inets)等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-48858 2026-06-12 14:34 2026-06-10 Show GitHub Exploit DB Packet Storm
2324 7.1 重要
Local 		- アップルのmacOSにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2022-26758 2026-06-12 14:34 2026-06-10 Show GitHub Exploit DB Packet Storm
2325 3.5 低
Physics 		- アップルのmacOSにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2022-48575 2026-06-12 14:34 2026-06-10 Show GitHub Exploit DB Packet Storm
2326 4 警告
Local 		NSA Ghidra NSAのGhidraにおける未定義、未指定、または実装定義の動作への依存に関する脆弱性 CWE-758
未定義、未指定、または実装定義の動作への依存 		CVE-2024-58350 2026-06-12 14:34 2026-06-10 Show GitHub Exploit DB Packet Storm
2327 6 警告
Local 		NVIDIA gpu display driver NVIDIAのgpu display driverにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2025-33221 2026-06-12 14:34 2026-05-26 Show GitHub Exploit DB Packet Storm
2328 6.7 警告
Local 		フォーティネット FortiProxy
FortiOS 		フォーティネットのFortiOS等の複数製品における安全でないデバッグアクセスレベルまたは状態にさらされた内部アセットに関する脆弱性 CWE-1244
安全でないデバッグアクセスレベルまたは状態にさらされた内部アセット 		CVE-2025-67862 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2329 7.8 重要
Local 		SQLite SQLite SQLiteにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-11822 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
2330 7.8 重要
Local 		SQLite SQLite SQLiteにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-11824 2026-06-12 14:34 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1121 - - - Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI plat… CWE-20
 Improper Input Validation  		CVE-2026-12537 2026-06-26 04:51 2026-06-24 Show GitHub Exploit DB Packet Storm
1122 8.8 HIGH
Network 		- - Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing mal… CWE-121
Stack-based Buffer Overflow 		CVE-2026-56766 2026-06-26 04:50 2026-06-26 Show GitHub Exploit DB Packet Storm
1123 8.5 HIGH
Network 		- - Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make arb… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-56769 2026-06-26 04:50 2026-06-26 Show GitHub Exploit DB Packet Storm
1124 4.3 MEDIUM
Network 		- - NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenticated users to read private notification feeds by supplying arbitrary user_id values to the GET /social/inter… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-56772 2026-06-26 04:50 2026-06-26 Show GitHub Exploit DB Packet Storm
1125 6.4 MEDIUM
Network 		- - MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows authenticated users to make arbitrary server requests by supplying unvalidat… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-56779 2026-06-26 04:50 2026-06-26 Show GitHub Exploit DB Packet Storm
1126 8.8 HIGH
Network 		- - Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link tok… CWE-862
 Missing Authorization 		CVE-2026-56768 2026-06-26 04:48 2026-06-26 Show GitHub Exploit DB Packet Storm
1127 7.5 HIGH
Network 		- - libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote attackers can crash s… CWE-129
 Improper Validation of Array Index 		CVE-2026-56770 2026-06-26 04:48 2026-06-26 Show GitHub Exploit DB Packet Storm
1128 6.5 MEDIUM
Local 		- - An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a pr… CWE-125
Out-of-bounds Read 		CVE-2026-9539 2026-06-26 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm
1129 8.2 HIGH
Network 		- - FlatPress contains a stored cross-site scripting vulnerability in comment and contact forms where name, URL, and email fields are rendered without proper output encoding in Smarty templates. Attacker… CWE-79
Cross-site Scripting 		CVE-2026-56785 2026-06-26 04:25 2026-06-24 Show GitHub Exploit DB Packet Storm
1130 6.5 MEDIUM
Network 		- - Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set… CWE-241
 Improper Handling of Unexpected Data Type 		CVE-2026-47110 2026-06-26 04:25 2026-06-25 Show GitHub Exploit DB Packet Storm