Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6271	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43019	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6272	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43020	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6273	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-43021	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6274	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43022	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6275	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-43023	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6276	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43024	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6277	7.3	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43025	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6278	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43026	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6279	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43027	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

6280	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43028	2026-05-11 11:08	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2241	-		-	-	SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.	CWE-502 Deserialization of Untrusted Data	CVE-2026-48909	2026-06-23 05:21	2026-06-20	Show	GitHub Exploit DB Packet Storm

2242	-		-	-	A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing a…	CWE-322 Key Exchange without Entity Authentication	CVE-2026-11745	2026-06-23 05:21	2026-06-22	Show	GitHub Exploit DB Packet Storm

2243	-		-	-	A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret causes the server to silently fall back to…	CWE-798 Use of Hard-coded Credentials	CVE-2026-11746	2026-06-23 05:21	2026-06-22	Show	GitHub Exploit DB Packet Storm

2244	-		-	-	A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an LDAP search filter wit…	CWE-90 LDAP Injection	CVE-2026-11748	2026-06-23 05:21	2026-06-22	Show	GitHub Exploit DB Packet Storm

2245	5.3	MEDIUM Network	-	-	A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: Node.js 22 and **Node.js …	CWE-400 Uncontrolled Resource Consumption	CVE-2026-48937	2026-06-23 05:20	2026-06-19	Show	GitHub Exploit DB Packet Storm

2246	7.5	HIGH Network	-	-	The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON pay…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-42127	2026-06-23 05:19	2026-06-23	Show	GitHub Exploit DB Packet Storm

2247	-		-	-	A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine r…	CWE-862 Missing Authorization	CVE-2026-8934	2026-06-23 05:18	2026-06-23	Show	GitHub Exploit DB Packet Storm

2248	9.0	CRITICAL Network	-	-	An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Services (AD CS) certificate auto-enrollment via the vendored Samba client script (in…	CWE-348 Use of Less Trusted Source	CVE-2026-12249	2026-06-23 05:18	2026-06-23	Show	GitHub Exploit DB Packet Storm

2249	9.8	CRITICAL Network	-	-	FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover.…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2026-54414	2026-06-23 05:17	2026-06-19	Show	GitHub Exploit DB Packet Storm

2250	7.5	HIGH Network	-	-	Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted to the anon role and c…	CWE-284 Improper Access Control	CVE-2026-56082	2026-06-23 05:17	2026-06-20	Show	GitHub Exploit DB Packet Storm