Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
751	8.7	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-6552	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

752	3.7	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-6976	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

753	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-7250	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

754	8.7	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-8589	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

755	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-9204	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

756	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける置換文字列の無害化に関する脆弱性	CWE-153 置換文字列の不適切な無害化	CVE-2026-9694	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

757	7.8	重要 Local	The Open Group	Unix	opengroupのUnixにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2025-71263	2026-06-12 14:35	2026-03-13	Show	GitHub Exploit DB Packet Storm

758	7.5	重要 Network	Dana Powers (dpkp)	kafka-python	Dana Powers (dpkp)のkafka-pythonにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-10142	2026-06-12 14:35	2026-06-10	Show	GitHub Exploit DB Packet Storm

759	7.5	重要 Network	Dana Powers (dpkp)	kafka-python	Dana Powers (dpkp)のkafka-pythonにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-10143	2026-06-12 14:35	2026-06-10	Show	GitHub Exploit DB Packet Storm

760	7.8	重要 Local	マイクロソフト	Microsoft Office 2024 Long-Term Servicing Channel Edition Microsoft Office 2021 Long Term Servicing Channel Edition Microsoft&nb…	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-843 型の取り違え	CVE-2026-44817	2026-06-12 14:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3241	5.9	MEDIUM Network	-	-	FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser. In src/simple_packet_parser_ng.cpp, after validating that the packet contains at least sizeof(ipv4…	CWE-125 Out-of-bounds Read	CVE-2026-48682	2026-06-5 01:28	2026-06-3	Show	GitHub Exploit DB Packet Storm

3242	7.5	HIGH Network	-	-	An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.	CWE-190 Integer Overflow or Wraparound	CVE-2026-37462	2026-06-5 01:28	2026-06-4	Show	GitHub Exploit DB Packet Storm

3243	6.3	MEDIUM Network	-	-	A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI mo…	CWE-79 Cross-site Scripting	CVE-2026-39107	2026-06-5 01:28	2026-06-4	Show	GitHub Exploit DB Packet Storm

3244	9.8	CRITICAL Network	-	-	CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.	CWE-113 HTTP Response Splitting	CVE-2026-38967	2026-06-5 01:26	2026-06-3	Show	GitHub Exploit DB Packet Storm

3245	9.8	CRITICAL Network	-	-	An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.	CWE-78 OS Command	CVE-2026-36576	2026-06-5 01:26	2026-06-4	Show	GitHub Exploit DB Packet Storm

3246	6.1	MEDIUM Network	-	-	Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS.	CWE-79 Cross-site Scripting	CVE-2026-33553	2026-06-5 01:25	2026-06-3	Show	GitHub Exploit DB Packet Storm

3247	5.4	MEDIUM Network	-	-	LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG pa…	CWE-436 Interpretation Conflict	CVE-2026-40930	2026-06-5 01:23	2026-06-5	Show	GitHub Exploit DB Packet Storm

3248	9.6	CRITICAL Network	-	-	An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HT…	CWE-78 OS Command	CVE-2026-35906	2026-06-5 01:23	2026-06-5	Show	GitHub Exploit DB Packet Storm

3249	8.8	HIGH Network	-	-	Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mo…	CWE-284 CWE-862 Improper Access Control Missing Authorization	CVE-2026-5228	2026-06-5 01:23	2026-06-5	Show	GitHub Exploit DB Packet Storm

3250	9.9	CRITICAL Network	-	-	OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.	CWE-863 Incorrect Authorization	CVE-2026-41283	2026-06-5 01:21	2026-06-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed