Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1221 7.8 重要
Local 		opentelemetry OpenTelemetry.Exporter.OpenTelemetryProtocol opentelemetryのOpenTelemetry.Exporter.OpenTelemetryProtocolにおけるアクセスパーミションのディレクトリの一時ファイル作成に関する脆弱性 CWE-379
不適切なアクセスパーミションのディレクトリに一時ファイル作成 		CVE-2026-42191 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
1222 7.5 重要
Network 		Absinthe-graphql Absinthe Absinthe-graphqlのAbsintheにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42793 2026-05-28 14:32 2026-05-8 Show GitHub Exploit DB Packet Storm
1223 7.5 重要
Network 		Absinthe-graphql Absinthe Absinthe-graphqlのAbsintheにおけるアルゴリズムの複雑さに関する脆弱性 CWE-407
アルゴリズムの複雑性 		CVE-2026-43967 2026-05-28 14:32 2026-05-8 Show GitHub Exploit DB Packet Storm
1224 6.1 警告
Network 		The Kyverno Authors Policy-reporter-ui The Kyverno AuthorsのPolicy-reporter-uiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44245 2026-05-28 14:32 2026-05-12 Show GitHub Exploit DB Packet Storm
1225 8.6 重要
Network 		Marginal v1-core Marginalのv1-coreにおける数値型間の変換の誤りに関する脆弱性 CWE-681
数値型間の変換の誤り 		CVE-2026-4931 2026-05-28 14:32 2026-04-7 Show GitHub Exploit DB Packet Storm
1226 7.4 重要
Network 		Project Jupyter Jupyter Server Jupyter Serverにおけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2025-61669 2026-05-28 12:05 2026-05-28 Show GitHub Exploit DB Packet Storm
1227 - - 日立 Hitachi Application Server
uCosminexus Application Runtime with Java for Apache Tomcat
uCosminexus Application Runtime with Java… 		Cosminexusにおける複数の脆弱性 - CVE-2026-22007
CVE-2026-22013
CVE-2026-22016
CVE-2026-22018
CVE-2026-22021
CVE-2026-23865
CVE-2026-34268
CVE-2026-34282 		2026-05-27 13:53 2026-05-26 Show GitHub Exploit DB Packet Storm
1228 - - 日立 Hitachi Automation Director
Hitachi Replication Manager
Hitachi Configuration Manager
Hitachi Ops Center API Configuration Manager
H… 		Hitachi Command Suite製品, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics AdvisorおよびHitachi Ops Center製品における複数の脆弱性 - CVE-2026-22007
CVE-2026-22013
CVE-2026-22016
CVE-2026-22018
CVE-2026-22021
CVE-2026-23865
CVE-2026-34268
CVE-2026-34282 		2026-05-27 13:53 2026-05-26 Show GitHub Exploit DB Packet Storm
1229 - - 日立 Hitachi Infrastructure Analytics Advisor
Hitachi Ops Center Analyzer
Hitachi Ops Center Analyzer viewpoint 		Hitachi Infrastructure Analytics Advisor，Hitachi Ops Center AnalyzerおよびHitachi Ops Center Analyzer viewpointにおける脆弱性 - CVE-2026-3314 2026-05-27 13:53 2026-05-26 Show GitHub Exploit DB Packet Storm
1230 - - LMSYS Org SGLang SGLangにおける複数の脆弱性 - CVE-2026-5760
CVE-2026-7301
CVE-2026-7302
CVE-2026-7304 		2026-05-27 12:17 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311041 7.8 HIGH
Local 		gnu gcc Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. CWE-190
 Integer Overflow or Wraparound 		CVE-2002-2439 2024-11-21 08:43 2019-10-24 Show GitHub Exploit DB Packet Storm
311042 - gehealthcare millennium_mg_firmware
millennium_nc_firmware
millennium_myosight_firmware 		GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which … CWE-255
Credentials Management 		CVE-2002-2446 2024-11-21 08:43 2015-08-4 Show GitHub Exploit DB Packet Storm
311043 - gehealthcare millennium_myosight
millennium_nc
millennium_mg 		GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie for the admin user, (4) reboot for the r… NVD-CWE-noinfo
CVE-2002-2445 2024-11-21 08:43 2015-08-4 Show GitHub Exploit DB Packet Storm
311044 - mit
opensuse
fedoraproject
redhat
debian
canonical 		kerberos_5
opensuse
fedora
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_desktop
enterprise_linux_eus
debian_linux
ubunt… 		schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial o… CWE-20
 Improper Input Validation  		CVE-2002-2443 2024-11-21 08:43 2013-05-29 Show GitHub Exploit DB Packet Storm
311045 - mozilla firefox
thunderbird
seamonkey 		The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getC… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2002-2437 2024-11-21 08:43 2011-12-8 Show GitHub Exploit DB Packet Storm
311046 - mozilla firefox
thunderbird
seamonkey 		The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote… CWE-200
Information Exposure 		CVE-2002-2436 2024-11-21 08:43 2011-12-8 Show GitHub Exploit DB Packet Storm
311047 - microsoft internet_explorer
ie 		The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive in… CWE-200
Information Exposure 		CVE-2002-2435 2024-11-21 08:43 2011-12-8 Show GitHub Exploit DB Packet Storm
311048 7.5 HIGH
Network 		balasys
siemens
suse
f5
hpe
stormshield 		dheater
scalance_w1750d_firmware
linux_enterprise_server
big-iq_centralized_management
traffix_signaling_delivery_controller
big-ip_service_proxy
big-ip_access_policy_manager
big… 		The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exp… CWE-400
 Uncontrolled Resource Consumption 		CVE-2002-20001 2024-11-21 08:42 2021-11-12 Show GitHub Exploit DB Packet Storm
311049 - gehealthcare entegra_p\&r GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3) 0 for the entegra user of the Codonics p… CWE-255
Credentials Management 		CVE-2001-1594 2024-11-21 08:38 2015-08-4 Show GitHub Exploit DB Packet Storm
311050 - gnu a2ps The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink atta… CWE-59
Link Following 		CVE-2001-1593 2024-11-21 08:38 2014-04-6 Show GitHub Exploit DB Packet Storm