Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1551	9.8	緊急 Network	Fleet Device Management	fleet	Fleet Device ManagementのfleetにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26191	2026-05-20 13:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1552	8.6	重要 Network	lfprojects	mlflow	lfprojectsのmlflowにおける根本の脆弱性による認証回避の脆弱性	CWE-305 根本の脆弱性による認証回避	CVE-2026-2652	2026-05-20 13:21	2026-05-15	Show	GitHub Exploit DB Packet Storm

1553	9.1	緊急 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品における余分なパラメータの不適切な処理に関する脆弱性	CWE-235 余分なパラメータの不適切な処理	CVE-2026-27851	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

1554	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28759	2026-05-20 13:21	2026-05-18	Show	GitHub Exploit DB Packet Storm

1555	5.5	警告 Local	マイクロソフト	Microsoft Teams	Microsoft Teams のなりすましの脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-32185	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

1556	7.2	重要 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33518	2026-05-20 13:21	2026-04-21	Show	GitHub Exploit DB Packet Storm

1557	9.8	緊急 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33519	2026-05-20 13:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

1558	5.3	警告 Adjacent	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるリソースの挿入に関する脆弱性	CWE-99 リソースの挿入	CVE-2026-33603	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

1559	6.1	警告 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33862	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

1560	7.5	重要 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-33893	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2831	-		-	-	Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to sched…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-48593	2026-05-28 04:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

2832	5.9	MEDIUM Network	putty	putty	PuTTY 0.72 before 0.84 has a double free in RSA KEX.	CWE-415 Double Free	CVE-2026-48850	2026-05-28 04:14	2026-05-26	Show	GitHub Exploit DB Packet Storm

2833	3.1	LOW Network	putty	putty	PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-48851	2026-05-28 04:12	2026-05-26	Show	GitHub Exploit DB Packet Storm

2834	3.7	LOW Network	putty	putty	PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.	CWE-617 Reachable Assertion	CVE-2026-48852	2026-05-28 04:11	2026-05-26	Show	GitHub Exploit DB Packet Storm

2835	5.3	MEDIUM Local	squirrel-lang	squirrel	A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a manipulation results …	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-9541	2026-05-28 03:48	2026-05-26	Show	GitHub Exploit DB Packet Storm

2836	9.8	CRITICAL Network	perl	perl	Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of th…	CWE-680 Integer Overflow to Buffer Overflow	CVE-2026-8376	2026-05-28 03:43	2026-05-26	Show	GitHub Exploit DB Packet Storm

2837	7.5	HIGH Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH_NLRI IPv6 attribute decoder. The function decode_mp_reach_ipv6() in src/bgp_protocol.cpp contains …	CWE-125 Out-of-bounds Read	CVE-2026-48688	2026-05-28 03:36	2026-05-27	Show	GitHub Exploit DB Packet Storm

2838	7.7	HIGH Network	microsoft	azure_stack_hci	Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.	CWE-20 Improper Input Validation	CVE-2026-26147	2026-05-28 03:34	2026-05-23	Show	GitHub Exploit DB Packet Storm

2839	8.8	HIGH Network	microsoft	sharepoint_server	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	CWE-502 Deserialization of Untrusted Data	CVE-2026-45659	2026-05-28 03:32	2026-05-23	Show	GitHub Exploit DB Packet Storm

2840	8.1	HIGH Adjacent	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The server is initialized with grpc::InsecureServerCredentials() (src/fastnetmon.c…	CWE-306 Missing Authentication for Critical Function	CVE-2026-48692	2026-05-28 03:30	2026-05-27	Show	GitHub Exploit DB Packet Storm