Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 2:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
41	7.6	重要 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 New	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-20252	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

42	9.8	緊急 Network	Splunk	Splunk	Splunkにおける重要な機能に対する認証の欠如に関する脆弱性 New	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-20253	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

43	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20254	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

44	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20255	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

45	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20256	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

46	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20257	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

47	5.4	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-20258	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

48	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2026-22893	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

49	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-24716	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

50	7.2	重要 Network	QNAP Systems	QuTS hero QNAP QTS	QNAP SystemsのQNAP QTS等の複数製品におけるOS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2026-24719	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
781	5.3	MEDIUM Network	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Windows Kerberos Denial of Service Vulnerability	CWE-125 Out-of-bounds Read	CVE-2026-42914	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

782	7.8	HIGH Local	nsa	ghidra	Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands und…	CWE-88 Argument Injection	CVE-2026-52750	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

783	8.8	HIGH Network	nsa	ghidra	Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE …	CWE-89 SQL Injection	CVE-2026-49498	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

784	3.3	LOW Local	nsa	ghidra	Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attacke…	CWE-22 Path Traversal	CVE-2026-49497	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

785	6.1	MEDIUM Local	nsa	ghidra	Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vecto…	CWE-416 Use After Free	CVE-2026-49496	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

786	5.5	MEDIUM Local	nsa	ghidra	Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O b…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-49495	2026-06-12 04:49	2026-06-10	Show	GitHub Exploit DB Packet Storm

787	7.0	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.	CWE-362 Race Condition	CVE-2026-42912	2026-06-12 04:47	2026-06-10	Show	GitHub Exploit DB Packet Storm

788	7.0	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	CWE-416 Use After Free	CVE-2026-42911	2026-06-12 04:47	2026-06-10	Show	GitHub Exploit DB Packet Storm

789	7.8	HIGH Local	microsoft	windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025	Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.	CWE-787 Out-of-bounds Write	CVE-2026-42910	2026-06-12 04:46	2026-06-10	Show	GitHub Exploit DB Packet Storm

790	5.5	MEDIUM Local	x.org redhat	x_server xwayland enterprise_linux	A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, le…	CWE-416 Use After Free	CVE-2026-50263	2026-06-12 04:46	2026-06-5	Show	GitHub Exploit DB Packet Storm