Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5771 7.8 重要
Local
Tommaso Bona (ParzivalHack) PySpector Tommaso Bona (ParzivalHack)のPySpectorにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-41206 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5772 6.1 警告
Network
cure53 DOMPurify cure53のDOMPurifyにおける複数の脆弱性 CWE-183
CWE-79
CVE-2026-41240 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5773 5.4 警告
Network
pretalx pretalx pretalxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-41241 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5774 8.1 重要
Network
Project Contour Contour Project ContourのContourにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-41246 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5775 9.8 緊急
Network
std42 elfinder std42のelfinderにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-41247 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5776 7.5 重要
Network
joinmastodon Mastodon joinmastodonのMastodonにおける行動ワークフローに関する脆弱性 CWE-841
行動ワークフローの不適切な実施
CVE-2026-41259 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5777 9.1 緊急
Network
dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化
CVE-2026-41327 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
5778 9.1 緊急
Network
dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化
CVE-2026-41328 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
5779 3.7
Network
OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性  CWE-799
インタラクション頻度の不適切な制御
CVE-2026-41333 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
5780 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 CWE-636
安全でない失敗処理
CVE-2026-41334 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the D… New CWE-79
Cross-site Scripting
CVE-2026-47946 2026-06-11 00:03 2026-06-10 Show GitHub Exploit DB Packet Storm
242 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… New CWE-79
Cross-site Scripting
CVE-2026-47945 2026-06-11 00:03 2026-06-10 Show GitHub Exploit DB Packet Storm
243 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… New CWE-79
Cross-site Scripting
CVE-2026-47944 2026-06-11 00:03 2026-06-10 Show GitHub Exploit DB Packet Storm
244 9.8 CRITICAL
Network
perl dbi DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the for… Update CWE-787
 Out-of-bounds Write
CVE-2026-10879 2026-06-11 00:02 2026-06-6 Show GitHub Exploit DB Packet Storm
245 9.8 CRITICAL
Network
binary datadog\ DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sour… Update CWE-93
CWE-150
CRLF Injection
 Improper Neutralization of Escape, Meta, or Control Sequences
CVE-2026-11362 2026-06-11 00:01 2026-06-6 Show GitHub Exploit DB Packet Storm
246 9.1 CRITICAL
Network
binary datadog\ DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send_s… Update CWE-93
CWE-150
CRLF Injection
 Improper Neutralization of Escape, Meta, or Control Sequences
CVE-2026-9270 2026-06-11 00:01 2026-06-6 Show GitHub Exploit DB Packet Storm
247 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… New CWE-79
Cross-site Scripting
CVE-2026-47941 2026-06-11 00:00 2026-06-10 Show GitHub Exploit DB Packet Storm
248 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the D… New CWE-79
Cross-site Scripting
CVE-2026-47947 2026-06-10 23:59 2026-06-10 Show GitHub Exploit DB Packet Storm
249 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… New CWE-79
Cross-site Scripting
CVE-2026-47948 2026-06-10 23:59 2026-06-10 Show GitHub Exploit DB Packet Storm
250 5.4 MEDIUM
Network
adobe experience_manager Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject ma… New CWE-79
Cross-site Scripting
CVE-2026-47949 2026-06-10 23:58 2026-06-10 Show GitHub Exploit DB Packet Storm