Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1091	6.1	警告 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33862	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

1092	7.5	重要 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-33893	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

1093	5.3	警告 Network	MediaWiki	MediaWiki	MediaWikiにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-34093	2026-05-20 13:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

1094	3.8	低 Network	MediaWiki	MediaWiki	MediaWikiにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-34094	2026-05-20 13:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

1095	8.1	重要 Network	Apache Software Foundation	Apache Flink	Apache Software FoundationのApache Flinkにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-35194	2026-05-20 13:20	2026-05-15	Show	GitHub Exploit DB Packet Storm

1096	4.3	警告 Network	マイクロソフト	Microsoft Edge	Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-35429	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

1097	7.8	重要 Local	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-37525	2026-05-20 13:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

1098	7.8	重要 Local	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-37526	2026-05-20 13:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

1099	9.8	緊急 Network	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおける複数の脆弱性	CWE-22 CWE-367	CVE-2026-37531	2026-05-20 13:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

1100	6.5	警告 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40016	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2371	-		-	-	In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free dlfb_ops_mmap() uses remap_pfn_range() to map vmalloc framebu…	-	CVE-2026-43497	2026-05-23 01:33	2026-05-21	Show	GitHub Exploit DB Packet Storm

2372	-		-	-	In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also use…	-	CVE-2026-43499	2026-05-23 01:33	2026-05-21	Show	GitHub Exploit DB Packet Storm

2373	-		-	-	In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header…	-	CVE-2026-43501	2026-05-23 01:33	2026-05-21	Show	GitHub Exploit DB Packet Storm

2374	-		-	-	In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy send can fail after user pages have been pinned but…	-	CVE-2026-43502	2026-05-23 01:33	2026-05-21	Show	GitHub Exploit DB Packet Storm

2375	9.6	CRITICAL Network	-	-	Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.	CWE-613 Insufficient Session Expiration	CVE-2026-8670	2026-05-23 01:32	2026-05-22	Show	GitHub Exploit DB Packet Storm

2376	7.5	HIGH Adjacent	-	-	Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-8671	2026-05-23 01:32	2026-05-22	Show	GitHub Exploit DB Packet Storm

2377	5.1	MEDIUM Local	-	-	Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.	CWE-1393 Use of Default Password	CVE-2026-8672	2026-05-23 01:32	2026-05-22	Show	GitHub Exploit DB Packet Storm

2378	5.9	MEDIUM Network	-	-	Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.	CWE-523 Unprotected Transport of Credentials	CVE-2026-8673	2026-05-23 01:32	2026-05-22	Show	GitHub Exploit DB Packet Storm

2379	7.5	HIGH Network	-	-	Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter	CWE-22 Path Traversal	CVE-2025-45145	2026-05-23 01:32	2026-05-23	Show	GitHub Exploit DB Packet Storm

2380	-		-	-	Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper output escaping of term-derived text. Confirmed affected paths include field formatter output (shs_fie…	CWE-79 Cross-site Scripting	CVE-2026-4929	2026-05-23 01:17	2026-05-22	Show	GitHub Exploit DB Packet Storm