Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5631 8.1 重要
Network
Statamic Statamic Statamicにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 CWE-470
クラスまたはコードを選択する外部から制御された入力の使用
CVE-2026-41175 2026-04-30 12:27 2026-04-22 Show GitHub Exploit DB Packet Storm
5632 9.8 緊急
Network
Rclone Rclone Rcloneにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-41176 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5633 9.8 緊急
Network
Rclone Rclone Rcloneにおける複数の脆弱性 CWE-306
CWE-78
CVE-2026-41179 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5634 9.9 緊急
Network
Froxlor Froxlor FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン
CVE-2026-41228 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5635 9.1 緊急
Network
Froxlor Froxlor Froxlorにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-41229 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5636 8.5 重要
Network
Froxlor Froxlor FroxlorにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-41230 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5637 7.5 重要
Network
Froxlor Froxlor Froxlorにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-41231 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5638 5 警告
Network
Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41232 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5639 5.4 警告
Network
Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41233 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
5640 8.6 重要
Local
OpenClaw OpenClaw OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性 CWE-15
システム構成または設定の外部制御
CVE-2026-41294 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 3.7 LOW
Network
- - Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, protections against replay of UsernameToken nonces and … New CWE-294
Authentication Bypass by Capture-replay 
CVE-2026-41000 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
802 5.3 MEDIUM
Local
- - Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local attacker on the same … New CWE-377
 Insecure Temporary File
CVE-2026-41001 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
803 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally. Update CWE-190
CWE-416
 Integer Overflow or Wraparound
 Use After Free
CVE-2026-45592 2026-06-12 00:21 2026-06-10 Show GitHub Exploit DB Packet Storm
804 8.8 HIGH
Network
- - Dulwich is a pure-Python implementation of the Git file formats and protocols. Versions starting with 0.10.0 and prior to 1.2.5 have an arbitrary file write leading to remote code execution when clon… New CWE-22
Path Traversal
CVE-2026-42305 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
805 - - - Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, Dulwich's `ProcessMergeDriver` substitutes the file path (from th… New CWE-78
OS Command 
CVE-2026-42563 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
806 10.0 CRITICAL
Network
- - Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not res… New CWE-284
Improper Access Control
CVE-2026-46695 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
807 9.6 CRITICAL
Network
- - Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users… New CWE-22
Path Traversal
CVE-2026-46703 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
808 6.5 MEDIUM
Network
- - Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. In versions 0.8.2 and prior, Boxlite allows … New CWE-404
 Improper Resource Shutdown or Release
CVE-2026-47213 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
809 3.3 LOW
Local
- - Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, dulwich.porcelain.format_patch(outdir=...) derives each patch fil… New CWE-22
Path Traversal
CVE-2026-47712 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm
810 5.7 MEDIUM
Network
- - Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.1.0 and prior to version 1.2.5, a client with push access could push a tiny crafted thin pack (~17… New CWE-400
CWE-789
 Uncontrolled Resource Consumption
 Memory Allocation with Excessive Size Value
CVE-2026-47734 2026-06-12 00:21 2026-06-11 Show GitHub Exploit DB Packet Storm