Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6271 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-43019 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6272 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-43020 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6273 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43021 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6274 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43022 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6275 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-43023 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6276 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43024 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6277 7.3 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43025 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6278 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43026 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6279 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-43027 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
6280 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43028 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2111 - - - Incorrect default permissions in ArubaSign, affecting versions prior to v4.6.6. The vulnerability is caused by the assignment of inappropriate permissions during the software’s default installation, … CWE-276
Incorrect Default Permissions  		CVE-2026-12602 2026-06-23 04:45 2026-06-22 Show GitHub Exploit DB Packet Storm
2112 - - - Vulnerability involving the exposure of sensitive data provided without adequate protection. The API exposes email and phone number data from the ‘email’ and ‘telefon’ fields. This vulnerability is a… CWE-200
Information Exposure 		CVE-2026-7166 2026-06-23 04:45 2026-06-22 Show GitHub Exploit DB Packet Storm
2113 - - - The vulnerability arises when the system fails to properly validate the 'email' field during the authentication process, allowing unverified or fake email addresses to be accepted. This lack of valid… CWE-200
Information Exposure 		CVE-2026-7167 2026-06-23 04:45 2026-06-22 Show GitHub Exploit DB Packet Storm
2114 - - - The vulnerability is present in the ‘/addJugador’ endpoint: * The 'keyJugador' and 'keyJugadorObjectiu' parameters allow the modification of other users’ information without requiring prior autho… CWE-20
 Improper Input Validation  		CVE-2026-7165 2026-06-23 04:45 2026-06-22 Show GitHub Exploit DB Packet Storm
2115 8.8 HIGH
Network 		- - Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authenticated attackers to upload arbitrary PHP files by submitting malicious files through the profile_pi… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-25758 2026-06-23 04:43 2026-06-20 Show GitHub Exploit DB Packet Storm
2116 6.1 MEDIUM
Network 		- - AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers… CWE-79
Cross-site Scripting 		CVE-2026-56347 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2117 7.5 HIGH
Network 		- - AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens, Authorize.Net webhooks, and Bitcoin tran… CWE-862
 Missing Authorization 		CVE-2026-56341 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2118 3.1 LOW
Network 		- - Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act as SQL wildcards. Atta… CWE-20
 Improper Input Validation  		CVE-2026-56325 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2119 4.3 MEDIUM
Network 		- - Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allows authenticated attackers to cause duplicate-page l… CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2026-56307 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2120 6.3 MEDIUM
Network 		- - Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-expiring API keys to bypass the require_apikey_expiration organization policy. The… CWE-285
Improper Authorization 		CVE-2026-56295 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm