Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2361 8.8 重要
Network 		Jenkins プロジェクト Email Extension Plugin JenkinsのEmail Extension Pluginにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-48920 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2362 7.5 重要
Network 		Jenkins プロジェクト Credentials Binding JenkinsのCredentials Bindingにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-48922 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2363 4.3 警告
Network 		Jenkins プロジェクト AppSpider JenkinsのAppSpiderにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-48923 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2364 4.3 警告
Network 		Jenkins プロジェクト Bitbucket OAuth JenkinsのBitbucket OAuthにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-48924 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2365 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-5272 2026-06-3 15:34 2026-04-1 Show GitHub Exploit DB Packet Storm
2366 5.5 警告
Local 		IBM IBM App Connect Enterprise IBMのIBM App Connect Enterpriseにおける重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2026-5515 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2367 8.8 重要
Network 		Agilonhealth (MphRx) Minerva Agilonhealth (MphRx)のMinervaにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-5781 2026-06-3 15:34 2026-04-28 Show GitHub Exploit DB Packet Storm
2368 7.5 重要
Network 		IBM IBM DB2 IBMのIBM DB2におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6051 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2369 7.5 重要
Network 		IBM IBM DB2 IBMのIBM DB2におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6052 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2370 5.5 警告
Local 		IBM IBM DB2 IBMのIBM DB2における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-6053 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3871 8.8 HIGH
Network 		jetbrains teamcity In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings CWE-88
Argument Injection 		CVE-2026-49373 2026-06-2 22:13 2026-05-30 Show GitHub Exploit DB Packet Storm
3872 7.6 HIGH
Network 		jetbrains teamcity In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters CWE-862
 Missing Authorization 		CVE-2026-49374 2026-06-2 22:12 2026-05-30 Show GitHub Exploit DB Packet Storm
3873 6.1 MEDIUM
Network 		jetbrains teamcity In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page CWE-79
Cross-site Scripting 		CVE-2026-49375 2026-06-2 22:11 2026-05-30 Show GitHub Exploit DB Packet Storm
3874 5.0 MEDIUM
Network 		- - The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a malicious link, the attacke… CWE-352
 Origin Validation Error 		CVE-2026-49433 2026-06-2 22:04 2026-06-2 Show GitHub Exploit DB Packet Storm
3875 - - - Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures lead… CWE-1220
 Insufficient Granularity of Access Control 		CVE-2021-46747 2026-06-2 22:04 2026-06-2 Show GitHub Exploit DB Packet Storm
3876 8.4 HIGH
Local 		- - In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. U… CWE-190
 Integer Overflow or Wraparound 		CVE-2025-48595 2026-06-2 22:04 2026-06-2 Show GitHub Exploit DB Packet Storm
3877 6.3 MEDIUM
Network 		- - A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of the file src/index.ts of the component get_build_status/get_build_log/trigger_bu… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-10276 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
3878 6.3 MEDIUM
Network 		- - A vulnerability was determined in ishayoyo excel-mcp up to 1.0.2. Impacted is an unknown function of the file src/index.ts of the component read_file/write_file. Executing a manipulation of the argum… CWE-22
Path Traversal 		CVE-2026-10278 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
3879 6.3 MEDIUM
Network 		- - A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the file src/wezterm_executor.ts of the component switch_pane/write_to_specific_pan… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-10279 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm
3880 6.3 MEDIUM
Network 		- - A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affects the function saveToDisk of the file src/tools/gmail.ts of the component MCP G… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-10277 2026-06-2 22:03 2026-06-2 Show GitHub Exploit DB Packet Storm