Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5411	5.5	警告 Local	アドビシステムズ	Adobe Illustrator	アドビのAdobe Illustratorにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-34663	2026-05-14 10:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

5412	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Painter	アドビのAdobe Substance 3D Painterにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34675	2026-05-14 10:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

5413	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Painter	アドビのAdobe Substance 3D Painterにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34676	2026-05-14 10:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

5414	7.8	重要 Local	アドビシステムズ	Adobe Illustrator	アドビのAdobe Illustratorにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-34687	2026-05-14 10:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

5415	8.2	重要 Local	デル	insightiq	デルのinsightiqにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35071	2026-05-14 10:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

5416	9.8	緊急 Network	デル	Dell ObjectScale elastic cloud storage	デルのelastic cloud storage等の複数製品におけるCSV ファイル内の数式要素の中和に関する脆弱性	CWE-1236 CSV ファイル内の数式要素の不適切な中和	CVE-2026-35157	2026-05-14 10:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

5417	5.4	警告 Network	Frappe	Frappe	Frappeにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-3673	2026-05-14 10:20	2026-04-22	Show	GitHub Exploit DB Packet Storm

5418	9.8	緊急 Network	Grokability, Inc.	Snipe-IT	Grokability, Inc.のSnipe-ITにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-37709	2026-05-14 10:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

5419	6.5	警告 Local	Linux Containers	LXC	Linux ContainersのLXCにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-39402	2026-05-14 10:19	2026-05-5	Show	GitHub Exploit DB Packet Storm

5420	8.8	重要 Network	Pi-hole	FTLDNS	Pi-holeのFTLDNSにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-39849	2026-05-14 10:19	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3021	-		-	-	Rejected reason: CVE REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-53826. Reason: This candidate is a duplicate of CVE-2025-53826. Notes: All CVE users should reference CVE-2025…	-	CVE-2026-54095	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

3022	-		-	-	Rejected reason: This candidate was issued in error.	-	CVE-2020-2521	2026-06-13 07:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

3023	5.5	MEDIUM Local	mongodb	mongodb	The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-9751	2026-06-13 05:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

3024	7.5	HIGH Network	vmware	spring_security	An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates …	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40988	2026-06-13 05:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

3025	5.4	MEDIUM Network	vmware	spring_security	An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 throug…	CWE-79 Cross-site Scripting	CVE-2026-41003	2026-06-13 05:30	2026-06-10	Show	GitHub Exploit DB Packet Storm

3026	5.3	MEDIUM Network	vmware	spring_security	Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloa…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-41694	2026-06-13 05:28	2026-06-10	Show	GitHub Exploit DB Packet Storm

3027	9.8	CRITICAL Network	qnap	qts	QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later	NVD-CWE-noinfo	CVE-2025-66276	2026-06-13 05:25	2026-06-10	Show	GitHub Exploit DB Packet Storm

3028	6.5	MEDIUM Network	qnap	qts quts_hero	A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read…	CWE-22 Path Traversal	CVE-2026-24717	2026-06-13 05:21	2026-06-10	Show	GitHub Exploit DB Packet Storm

3029	7.5	HIGH Network	qnap	qumagie	A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We hav…	CWE-359 CWE-862 Exposure of Private Personal Information to an Unauthorized Actor Missing Authorization	CVE-2026-26237	2026-06-13 04:53	2026-06-10	Show	GitHub Exploit DB Packet Storm

3030	5.5	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.131, a user who holds…	CWE-284 NVD-CWE-noinfo Improper Access Control	CVE-2026-20259	2026-06-13 04:50	2026-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed