Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233831 6.8 警告 stunnel - stunnel の OCSP 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2420 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
233832 6.8 警告 sazcart - SazCart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2411 2012-12-20 18:52 2008-05-22 Show GitHub Exploit DB Packet Storm
233833 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server の管理アプリケーションサーバにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2406 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
233834 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2405 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
233835 10 危険 サン・マイクロシステムズ - Sun Java ASP Server のリクエスト処理実装におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2404 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
233836 5 警告 サン・マイクロシステムズ - Sun Java ASP Server の Admin Server におけるパスワードハッシュを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2402 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
233837 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server の Admin Server における任意の新規ファイルにアペンドされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2401 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
233838 7.2 危険 stunnel - stunnel における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2400 2012-12-20 18:52 2008-05-22 Show GitHub Exploit DB Packet Storm
233839 7.5 危険 wajox software - Wajox Software microSSys CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2396 2012-12-20 18:52 2008-05-21 Show GitHub Exploit DB Packet Storm
233840 7.5 危険 tagworx - TAGWORX.CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2394 2012-12-20 18:52 2008-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1841 4.8 MEDIUM
Physics 		- - capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject parameters. Attackers can hook t… CWE-287
Improper Authentication 		CVE-2026-56294 2026-06-23 06:14 2026-06-21 Show GitHub Exploit DB Packet Storm
1842 - - - In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts. CWE-79
Cross-site Scripting 		CVE-2026-8296 2026-06-23 05:44 2026-06-19 Show GitHub Exploit DB Packet Storm
1843 - - - Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in th… CWE-285
Improper Authorization 		CVE-2026-12673 2026-06-23 05:44 2026-06-20 Show GitHub Exploit DB Packet Storm
1844 9.1 CRITICAL
Network 		- - Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a … CWE-125
Out-of-bounds Read 		CVE-2025-62821 2026-06-23 05:44 2026-06-19 Show GitHub Exploit DB Packet Storm
1845 7.5 HIGH
Network 		- - GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there i… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2025-66389 2026-06-23 05:44 2026-06-22 Show GitHub Exploit DB Packet Storm
1846 3.7 LOW
Network 		- - GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization. CWE-696
 Incorrect Behavior Order 		CVE-2026-56355 2026-06-23 05:43 2026-06-21 Show GitHub Exploit DB Packet Storm
1847 6.3 MEDIUM
Local 		- - The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed i… CWE-20
CWE-79
 Improper Input Validation 
Cross-site Scripting 		CVE-2026-21768 2026-06-23 05:42 2026-06-20 Show GitHub Exploit DB Packet Storm
1848 9.9 CRITICAL
Network 		- - Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to gi… CWE-94
Code Injection 		CVE-2026-5366 2026-06-23 05:41 2026-06-21 Show GitHub Exploit DB Packet Storm
1849 7.7 HIGH
Local 		- - Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulnerability allows physical memory allocat… CWE-416
 Use After Free 		CVE-2026-34192 2026-06-23 05:40 2026-06-19 Show GitHub Exploit DB Packet Storm
1850 7.7 HIGH
Local 		- - Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario. A shared resource (memory pa… CWE-416
 Use After Free 		CVE-2026-41156 2026-06-23 05:40 2026-06-19 Show GitHub Exploit DB Packet Storm