Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
411 5.4 警告
Network
appsmith appsmith appsmithにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-7299 2026-06-8 11:44 2026-06-2 Show GitHub Exploit DB Packet Storm
412 7.5 重要
Network
Progress Software Corporation Sitefinity Progress Software CorporationのSitefinityにおける認証情報の不十分な保護に関する脆弱性 New CWE-522
認証情報の不十分な保護
CVE-2026-7312 2026-06-8 11:44 2026-06-2 Show GitHub Exploit DB Packet Storm
413 4.9 警告
Network
Progress Software Corporation Sitefinity Progress Software CorporationのSitefinityにおける認証情報の不十分な保護に関する脆弱性 New CWE-522
認証情報の不十分な保護
CVE-2026-7313 2026-06-8 11:44 2026-06-2 Show GitHub Exploit DB Packet Storm
414 8.8 重要
Network
SmarterTools Inc. SmarterMail SmarterTools Inc.のSmarterMailにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-7807 2026-06-8 11:44 2026-05-8 Show GitHub Exploit DB Packet Storm
415 5.5 警告
Local
Python Packaging Authority pip Python Packaging Authorityのpipにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-8643 2026-06-8 11:44 2026-06-1 Show GitHub Exploit DB Packet Storm
416 9.1 緊急
Network
IBM IBM WebSphere Application Server IBMのIBM WebSphere Application Serverにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避
CVE-2026-8644 2026-06-8 11:44 2026-06-1 Show GitHub Exploit DB Packet Storm
417 9.8 緊急
Network
F5 Networks njs F5 Networksのnjsにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-8711 2026-06-8 11:44 2026-05-19 Show GitHub Exploit DB Packet Storm
418 9 緊急
Network
IBM IBM WebSphere Application Server IBMのIBM WebSphere Application Serverにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション
CVE-2026-9311 2026-06-8 11:44 2026-06-1 Show GitHub Exploit DB Packet Storm
419 9 緊急
Network
IBM IBM WebSphere Application Server IBMのIBM WebSphere Application Serverにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-9319 2026-06-8 11:44 2026-06-1 Show GitHub Exploit DB Packet Storm
420 8.5 重要
Network
IBM IBM WebSphere Application Server IBMのIBM WebSphere Application Serverにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-9330 2026-06-8 11:44 2026-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2421 5.3 MEDIUM
Local
- - A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::read_animations of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Load… CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow
CVE-2026-10230 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2422 5.3 MEDIUM
Local
- - A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a… CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow
CVE-2026-10231 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2423 5.3 MEDIUM
Local
- - A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function aiNode::~aiNode of the file scene.cpp of the component ASE File Parser. Executing a manipulation c… CWE-119
CWE-416
Incorrect Access of Indexable Resource ('Range Error') 
 Use After Free
CVE-2026-10232 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2424 3.5 LOW
Network
- - A vulnerability was detected in Mettle sendportal up to 3.0.1. This affects an unknown part of the file /webview/ of the component Campaign Handler. The manipulation of the argument content results i… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-10234 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2425 6.3 MEDIUM
Network
- - A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stock_manager.php. This manipulation of the argument… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10235 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2426 7.3 HIGH
Network
- - A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save of the component User Management… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-10236 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2427 4.7 MEDIUM
Network
- - A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. Per… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10237 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2428 6.3 MEDIUM
Network
- - A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUtil.addImage of the file /airag/word/edit. Executing a manipulation can lead to server-side request … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10239 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2429 6.3 MEDIUM
Network
- - A vulnerability was identified in JeecgBoot up to 3.9.2. The impacted element is an unknown function of the file /airag/airagModel/test. The manipulation of the argument baseUrl leads to server-side … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10240 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2430 6.3 MEDIUM
Network
- - A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1. This affects the function FileDownloadUtils.download2DiskFromNet of the file /airag/app/debug of the comp… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-10241 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm