Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1011 4.1 警告
Network 		Esri ArcGIS Server EsriのArcGIS Serverにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-2813 2026-05-25 10:23 2026-05-20 Show GitHub Exploit DB Packet Storm
1012 7 重要
Local 		Samba Project rsync Samba ProjectのrsyncにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-29518 2026-05-25 10:23 2026-05-20 Show GitHub Exploit DB Packet Storm
1013 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-31430 2026-05-25 10:23 2026-04-20 Show GitHub Exploit DB Packet Storm
1014 8.8 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-31432 2026-05-25 10:23 2026-04-22 Show GitHub Exploit DB Packet Storm
1015 4.3 警告
Network 		GLPI-PROJECT.ORG GLPI GLPI-PROJECT.ORGのGLPIにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-32312 2026-05-25 10:23 2026-05-19 Show GitHub Exploit DB Packet Storm
1016 7.8 重要
Local 		mullvad mullvad vpn mullvadのmullvad vpnにおける複数の脆弱性 CWE-269
CWE-345
CWE-427
CWE-noinfo
CVE-2026-32323 2026-05-25 10:23 2026-05-19 Show GitHub Exploit DB Packet Storm
1017 6.5 警告
Network 		Faraday Project Faraday Faraday ProjectのFaradayにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-33637 2026-05-25 10:22 2026-05-19 Show GitHub Exploit DB Packet Storm
1018 8.8 重要
Local 		FreeBSD FreeBSD FreeBSDにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-39461 2026-05-25 10:22 2026-05-21 Show GitHub Exploit DB Packet Storm
1019 6.5 警告
Network 		plane plane planeにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-40102 2026-05-25 10:22 2026-05-20 Show GitHub Exploit DB Packet Storm
1020 7.5 重要
Network 		マイクロソフト Microsoft Entra ID Microsoft Entra ID のスプーフィングの脆弱性 CWE-200
情報漏えい 		CVE-2026-40379 2026-05-25 10:22 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2911 - - - In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads The pads missed checks for connected devices which may a null deref… - CVE-2026-46222 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2912 - - - In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure When drm_gpuvm_resv_object_alloc() fails, the pre-allocated st… - CVE-2026-46224 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2913 - - - In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure to disable and free the interrupts in case controller registra… - CVE-2026-46241 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2914 - - - In the Linux kernel, the following vulnerability has been resolved: cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated A chain of commits going back to v7.0 reworked rmdir to sa… - CVE-2026-46223 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2915 6.1 MEDIUM
Network 		mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and realier, in src/mistune/directives/image.py, the render_figure() function concatenates figclass and figwidth options direc… CWE-79
Cross-site Scripting 		CVE-2026-44896 2026-05-28 22:43 2026-05-27 Show GitHub Exploit DB Packet Storm
2916 6.1 MEDIUM
Network 		mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, HTMLRenderer.heading() builds the opening <hN> tag by string-concatenating the id attribute value directly into the HTM… CWE-79
Cross-site Scripting 		CVE-2026-44897 2026-05-28 22:42 2026-05-27 Show GitHub Exploit DB Packet Storm
2917 6.1 MEDIUM
Network 		mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_toc_ul() builds a <ul> table-of-contents tree from a list of (level, id, text) tuples. Both the id value (used a… CWE-79
Cross-site Scripting 		CVE-2026-44898 2026-05-28 22:42 2026-05-27 Show GitHub Exploit DB Packet Storm
2918 5.4 MEDIUM
Network 		apache shiro Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login. In affected versions, insufficient validation of this client-controlled value coul… CWE-601
Open Redirect 		CVE-2026-48589 2026-05-28 22:38 2026-05-26 Show GitHub Exploit DB Packet Storm
2919 6.1 MEDIUM
Network 		mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the Image directive plugin validates the :width: and :height: options with a regex compiled as _num_re = re.compile(r"^… CWE-79
Cross-site Scripting 		CVE-2026-44899 2026-05-28 22:38 2026-05-27 Show GitHub Exploit DB Packet Storm
2920 8.8 HIGH
Network 		tanium connect Tanium addressed an unauthorized code execution vulnerability in Connect. CWE-78
OS Command  		CVE-2026-9207 2026-05-28 22:31 2026-05-27 Show GitHub Exploit DB Packet Storm