Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
141 6.1 警告
Physics 		langflow langflow langflowにおけるセッション期限に関する脆弱性 New CWE-613
不適切なセッション期限 		CVE-2026-55423 2026-06-26 11:54 2026-06-23 Show GitHub Exploit DB Packet Storm
142 7.5 重要
Network 		langflow langflow langflowにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-55446 2026-06-26 11:54 2026-06-23 Show GitHub Exploit DB Packet Storm
143 9.6 緊急
Network 		langflow langflow langflowにおける複数の脆弱性 New CWE-200
CWE-61
CVE-2026-55447 2026-06-26 11:54 2026-06-23 Show GitHub Exploit DB Packet Storm
144 9.3 緊急
Network 		langflow langflow langflowにおける複数の脆弱性 New CWE-200
CWE-306
CWE-400
CVE-2026-55450 2026-06-26 11:54 2026-06-23 Show GitHub Exploit DB Packet Storm
145 7.5 重要
Network 		chimurai http-proxy-middleware chimuraiのhttp-proxy-middlewareにおけるCRLF インジェクションの脆弱性 New CWE-93
CRLF インジェクション 		CVE-2026-55603 2026-06-26 11:54 2026-06-22 Show GitHub Exploit DB Packet Storm
146 6.5 警告
Network 		レッドハット
OpenBSD		 Red Hat Hardened Images
Red Hat OpenShift Container Platform
OpenSSH
Red Hat Enterprise Linux 		OpenBSD等の複数ベンダの製品における二重解放に関する脆弱性 New CWE-415
二重解放 		CVE-2026-55653 2026-06-26 11:54 2026-06-23 Show GitHub Exploit DB Packet Storm
147 3.7 低
Network 		レッドハット
OpenBSD		 Red Hat Hardened Images
OpenSSH
Red Hat Enterprise Linux 		OpenBSD等の複数ベンダの製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-55654 2026-06-26 11:54 2026-06-23 Show GitHub Exploit DB Packet Storm
148 6.1 警告
Local 		レッドハット
OpenBSD		 OpenSSH
Red Hat Enterprise Linux 		OpenBSD等の複数ベンダの製品における意図するエンドポイントとの通信チャネルの制限に関する脆弱性 New CWE-923
意図するエンドポイントとの通信チャネルの不適切な制限 		CVE-2026-55655 2026-06-26 11:54 2026-06-23 Show GitHub Exploit DB Packet Storm
149 4.9 警告
Local 		libexpat project libexpat libexpat projectのlibexpatにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-56131 2026-06-26 11:53 2026-06-19 Show GitHub Exploit DB Packet Storm
150 6.9 警告
Local 		libexpat project libexpat libexpat projectのlibexpatにおける不正な同期に関する脆弱性 New CWE-821
不正な同期 		CVE-2026-56132 2026-06-26 11:53 2026-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3991 9.1 CRITICAL
Network 		- - Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover. The getExistUserByBindingRule function matches users by email without… - CVE-2026-9092 2026-06-2 04:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3992 4.3 MEDIUM
Network 		- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reported previously, the same missing mailbox m… CWE-285
Improper Authorization 		CVE-2026-48810 2026-06-2 04:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3993 9.0 CRITICAL
Network 		- - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the application.updateTraefikConfig tRPC endpoint allows admin/owner users … CWE-78
OS Command  		CVE-2026-45630 2026-06-2 04:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3994 7.2 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version… CWE-78
OS Command  		CVE-2025-41265 2026-06-2 03:58 2026-05-29 Show GitHub Exploit DB Packet Storm
3995 7.2 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version… CWE-78
OS Command  		CVE-2025-41266 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
3996 7.2 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version… CWE-78
OS Command  		CVE-2025-41267 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
3997 9.1 CRITICAL
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated att… CWE-23
 Relative Path Traversal 		CVE-2025-41268 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
3998 9.8 CRITICAL
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in versio… CWE-78
OS Command  		CVE-2025-41269 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
3999 9.8 CRITICAL
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in versio… CWE-78
OS Command  		CVE-2025-41270 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm
4000 7.5 HIGH
Network 		waterfall-security wf-500_firmware Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers … CWE-23
 Relative Path Traversal 		CVE-2025-41271 2026-06-2 03:57 2026-05-29 Show GitHub Exploit DB Packet Storm