Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2451	5	警告 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-9245	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

2452	4.3	警告 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-9246	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

2453	2.4	低 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおける不十分なロギングに関する脆弱性	CWE-778 不十分なロギング	CVE-2026-9247	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

2454	2.6	低 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-9248	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

2455	3.1	低 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおける未検証のパスワード変更に関する脆弱性	CWE-620 未検証のパスワード変更	CVE-2026-9249	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

2456	5.4	警告 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-9251	2026-05-28 14:35	2026-05-22	Show	GitHub Exploit DB Packet Storm

2457	9.8	緊急 Network	LiteSpeed Technologies	LiteSpeed cPanel Plugin LiteSpeed WHM Plugin (previously cPanel/WHM Plugin)	LiteSpeed TechnologiesのLiteSpeed cPanel Plugin等の複数製品における不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-48172	2026-05-28 14:34	2026-05-21	Show	GitHub Exploit DB Packet Storm

2458	9.8	緊急 Network	Apache Software Foundation	Apache Fory	Apache Software FoundationのApache Foryにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-48207	2026-05-28 14:34	2026-05-21	Show	GitHub Exploit DB Packet Storm

2459	9.8	緊急 Network	FastNetMon	FastNetMon	Pavel OdintsovのFastNetMonにおける複数の脆弱性	CWE-122 CWE-193 CWE-787	CVE-2026-48689	2026-05-28 14:34	2026-05-26	Show	GitHub Exploit DB Packet Storm

2460	9.1	緊急 Network	Honeywell International Inc.	Control Network Module Firmware	Honeywell International Inc.のControl Network Module Firmwareにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-5433	2026-05-28 14:33	2026-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3521	4.3	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion	CWE-862 Missing Authorization	CVE-2026-49378	2026-06-2 21:38	2026-05-30	Show	GitHub Exploit DB Packet Storm

3522	6.5	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names	CWE-522 Insufficiently Protected Credentials	CVE-2026-49379	2026-06-2 21:37	2026-05-30	Show	GitHub Exploit DB Packet Storm

3523	6.1	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible	CWE-601 Open Redirect	CVE-2026-49380	2026-06-2 21:37	2026-05-30	Show	GitHub Exploit DB Packet Storm

3524	4.8	MEDIUM Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible	CWE-79 Cross-site Scripting	CVE-2026-49381	2026-06-2 21:36	2026-05-30	Show	GitHub Exploit DB Packet Storm

3525	5.5	MEDIUM Local	synology	storage_manager	A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive inf…	CWE-598 Information Exposure Through Query Strings in GET Request	CVE-2026-2237	2026-06-2 19:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

3526	7.5	HIGH Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-49372	2026-06-2 13:07	2026-05-30	Show	GitHub Exploit DB Packet Storm

3527	8.2	HIGH Network	jetbrains	teamcity	In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible	CWE-79 Cross-site Scripting	CVE-2026-49371	2026-06-2 13:06	2026-05-30	Show	GitHub Exploit DB Packet Storm

3528	7.5	HIGH Network	-	-	FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.220, the email processing pipeline in FreeScout's FetchEmails command has two code paths for identifyin…	CWE-290 CWE-345 Authentication Bypass by Spoofing Insufficient Verification of Data Authenticity	CVE-2026-47123	2026-06-2 12:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

3529	8.2	HIGH Network	-	-	form-data-objectizer converts FormData to object. Prior to 1.0.1, form-data-objectizer walks bracket-notation form keys (e.g. name[sub]) into nested objects without filtering __proto__, constructor, …	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2026-46510	2026-06-2 12:16	2026-05-29	Show	GitHub Exploit DB Packet Storm

3530	8.8	HIGH Network	-	-	Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteRegistry function in Dokploy (packages/server/src/services/registry.ts) executes docker logout ${respon…	CWE-78 OS Command	CVE-2026-45662	2026-06-2 12:16	2026-05-30	Show	GitHub Exploit DB Packet Storm