Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3601 7.5 重要
Network 		オラクル Oracle Database オラクルのOracle Databaseにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-46835 2026-06-5 10:45 2026-05-28 Show GitHub Exploit DB Packet Storm
3602 5.3 警告
Network 		オラクル REST Data Services オラクルのREST Data Servicesにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46842 2026-06-5 10:45 2026-05-28 Show GitHub Exploit DB Packet Storm
3603 5.3 警告
Network 		オラクル REST Data Services オラクルのREST Data Servicesにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-46843 2026-06-5 10:45 2026-05-28 Show GitHub Exploit DB Packet Storm
3604 8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-47294 2026-06-5 10:45 2026-06-1 Show GitHub Exploit DB Packet Storm
3605 4.3 警告
Network 		mintplexlabs anythingllm mintplexlabsのanythingllmにおける複数の脆弱性 CWE-285
CWE-639
CVE-2026-47713 2026-06-5 10:45 2026-05-28 Show GitHub Exploit DB Packet Storm
3606 9.1 緊急
Network 		GitHub cli GitHubのcliにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-48501 2026-06-5 10:45 2026-05-29 Show GitHub Exploit DB Packet Storm
3607 5.3 警告
Network 		Exim Development Exim Exim DevelopmentのEximにおける最小値チェックのない数値範囲の比較に関する脆弱性 CWE-839
最小値チェックのない数値範囲の比較 		CVE-2026-48840 2026-06-5 10:45 2026-05-30 Show GitHub Exploit DB Packet Storm
3608 8.1 重要
Network 		Project Jupyter Jupyter Server Project JupyterのJupyter Serverにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-5422 2026-06-5 10:45 2026-06-2 Show GitHub Exploit DB Packet Storm
3609 7.5 重要
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける入力の構文的正当性の検証に関する脆弱性 CWE-1286
入力の構文的正当性の不適切な検証 		CVE-2026-7307 2026-06-5 10:45 2026-05-19 Show GitHub Exploit DB Packet Storm
3610 8.1 重要
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-7504 2026-06-5 10:45 2026-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
381 7.5 HIGH
Network 		- - In the Linux kernel, the following vulnerability has been resolved: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling A SOFTIRQ-safe to SOFTIRQ-unsafe lock order deadlock can occur in sen… New - CVE-2026-52946 2026-06-29 15:16 2026-06-25 Show GitHub Exploit DB Packet Storm
382 6.3 MEDIUM
Network 		joomlaworks k2 The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches `\.php$` and executes them under the K2 web user. A K2 Author can upload … New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-48946 2026-06-29 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
383 5.3 MEDIUM
Network 		joomlaworks k2 The K2 article gallery upload path accepts a zip/tar archive, extracts it under `/media/k2/galleries/<id>/`, and only renames image files (gif/jpg/jpeg/png/webp) to safe names — non-image files (incl… New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-48945 2026-06-29 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
384 6.5 MEDIUM
Network 		joomlaworks k2 The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SITE/` and passed to `JFile::copy()`. `JPath::clean` does NOT strip `..`, and the… New CWE-22
Path Traversal 		CVE-2026-48944 2026-06-29 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
385 6.5 MEDIUM
Network 		joomlaworks k2 K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`. A Registered Joomla user, by including the field `K2UserForm=1` in a standard `com_users` `profile.save` POST, … New CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-48943 2026-06-29 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
386 6.1 MEDIUM
Network 		joomlaworks k2 K2 ≤ 2.26 renders the `#__k2_users.image` column directly into HTML `src` attributes via two distinct templates, in both cases without HTML escaping. New CWE-79
Cross-site Scripting 		CVE-2026-48942 2026-06-29 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
387 6.5 MEDIUM
Network 		joomlaworks k2 The K2 frontend `item.checkin` task accepts an unauthenticated `sigProFolder` query parameter and uses it directly to address a `JFolder::delete()` call under `/media/k2/galleries/` New CWE-862
 Missing Authorization 		CVE-2026-48941 2026-06-29 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
388 3.4 LOW
Network 		joomlaworks k2 A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `embedVideo` POST field contains a raw `<script>` tag; K2 stores it verbatim and renders it unescaped t… New CWE-79
Cross-site Scripting 		CVE-2026-48940 2026-06-29 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
389 8.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_… New - CVE-2026-53322 2026-06-28 17:16 2026-06-27 Show GitHub Exploit DB Packet Storm
390 9.8 CRITICAL
Network 		- - In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop uses '<=' instead o… New - CVE-2026-53309 2026-06-28 17:16 2026-06-27 Show GitHub Exploit DB Packet Storm