Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6241	9.8	緊急 Network	Kestra	Kestra	KestraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-38428	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

6242	7.2	重要 Network	Gotenberg, Inc.	Gotenberg	TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-39383	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

6243	8.8	重要 Network	Apache Software Foundation	Apache NiFi	Apache Software FoundationのApache NiFiにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-39816	2026-05-11 11:10	2026-05-8	Show	GitHub Exploit DB Packet Storm

6244	8.2	重要 Network	Quarkus	Quarkus	Quarkusにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-39852	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

6245	4.8	警告 Network	Linux Containers	Incus	Linux ContainersのIncusにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-40243	2026-05-11 11:10	2026-05-6	Show	GitHub Exploit DB Packet Storm

6246	7.5	重要 Network	Gotenberg, Inc.	Gotenberg	TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-40280	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

6247	8.8	重要 Network	Math.js	Math.js	Math.jsにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-41139	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

6248	8.8	重要 Network	OpenEXR	OpenEXR	OpenEXRにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-41142	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

6249	7.7	重要 Network	Istio	Istio	Istioにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41413	2026-05-11 11:09	2026-05-7	Show	GitHub Exploit DB Packet Storm

6250	8.1	重要 Network	Mervin Praison (MervinPraison)	PraisonAI	Mervin Praison (MervinPraison)のPraisonAI等の複数製品におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-41496	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2251	-		-	-	In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0] The repro sets up a …	-	CVE-2026-52910	2026-06-20 00:16	2026-06-20	Show	GitHub Exploit DB Packet Storm

2252	-		-	-	In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported that vti6_init_net() does not set the net…	-	CVE-2026-52909	2026-06-20 00:16	2026-06-20	Show	GitHub Exploit DB Packet Storm

2253	-		-	-	In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible If IB_MR_REREG_ACCESS changes from RO to RW then the umem has to be …	-	CVE-2026-52908	2026-06-20 00:16	2026-06-20	Show	GitHub Exploit DB Packet Storm

2254	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2026-6716	2026-06-19 08:16	2026-06-19	Show	GitHub Exploit DB Packet Storm

2255	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2026-10746	2026-06-19 08:16	2026-06-19	Show	GitHub Exploit DB Packet Storm

2256	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid…	-	CVE-2026-2842	2026-06-19 05:16	2026-06-19	Show	GitHub Exploit DB Packet Storm

2257	8.1	HIGH Network	zoom	meeting_software_development_kit workplace	Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privi…	CWE-939 Improper Authorization in Handler for Custom URL Scheme	CVE-2026-53408	2026-06-17 03:59	2026-06-13	Show	GitHub Exploit DB Packet Storm

2258	7.2	HIGH Network	mariadb	mariadb	MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high…	CWE-78 OS Command	CVE-2026-48165	2026-06-17 03:58	2026-06-13	Show	GitHub Exploit DB Packet Storm

2259	6.1	MEDIUM Local	docker mobyproject	engine moby moby\/v2	Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during …	CWE-81 CWE-367 Improper Neutralization of Script in an Error Message Web Page Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-41568	2026-06-17 03:31	2026-06-13	Show	GitHub Exploit DB Packet Storm

2260	7.2	HIGH Local	docker mobyproject	engine moby moby\/v2	Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during …	CWE-61 CWE-367 UNIX Symbolic Link (Symlink) Following Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-42306	2026-06-17 03:31	2026-06-13	Show	GitHub Exploit DB Packet Storm