Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1661 5.8 警告
Network 		traefik traefik traefikにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
送信データへの重要な情報の挿入 		CVE-2026-41181 2026-05-21 10:52 2026-05-15 Show GitHub Exploit DB Packet Storm
1662 7.5 重要
Network 		DHTMLX PDF Export Module DHTMLXのPDF Export Moduleにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41552 2026-05-21 10:52 2026-05-15 Show GitHub Exploit DB Packet Storm
1663 9.1 緊急
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-41919 2026-05-21 10:52 2026-05-19 Show GitHub Exploit DB Packet Storm
1664 9.1 緊急
Network 		LangGenius, Inc. Dify LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41947 2026-05-21 10:52 2026-05-18 Show GitHub Exploit DB Packet Storm
1665 9.4 緊急
Network 		LangGenius, Inc. Dify LangGenius, Inc.のDifyにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-41948 2026-05-21 10:52 2026-05-18 Show GitHub Exploit DB Packet Storm
1666 7.5 重要
Network 		LangGenius, Inc. Dify LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41949 2026-05-21 10:51 2026-05-18 Show GitHub Exploit DB Packet Storm
1667 7.5 重要
Network 		twisted twisted twistedにおける複数の脆弱性 CWE-400
CWE-407
CVE-2026-42304 2026-05-21 10:51 2026-05-13 Show GitHub Exploit DB Packet Storm
1668 4.3 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-4273 2026-05-21 10:51 2026-05-18 Show GitHub Exploit DB Packet Storm
1669 8.8 重要
Network 		Grav CMS grav Grav CMSのgravにおける複数の脆弱性 CWE-269
CWE-434
CVE-2026-42844 2026-05-21 10:51 2026-05-12 Show GitHub Exploit DB Packet Storm
1670 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-Other
その他 		CVE-2026-43090 2026-05-21 10:51 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2941 6.5 MEDIUM
Adjacent 		- - epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic he… CWE-306
Missing Authentication for Critical Function 		CVE-2026-47672 2026-05-28 04:41 2026-05-27 Show GitHub Exploit DB Packet Storm
2942 8.1 HIGH
Adjacent 		- - epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45… CWE-295
Improper Certificate Validation  		CVE-2026-44900 2026-05-28 04:41 2026-05-27 Show GitHub Exploit DB Packet Storm
2943 8.1 HIGH
Adjacent 		- - epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor can present any TLS c… CWE-295
Improper Certificate Validation  		CVE-2026-45574 2026-05-28 04:41 2026-05-27 Show GitHub Exploit DB Packet Storm
2944 - - - Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job", ...) handler in 'El… CWE-862
 Missing Authorization 		CVE-2026-48592 2026-05-28 04:38 2026-05-27 Show GitHub Exploit DB Packet Storm
2945 - - - Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to sched… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-48593 2026-05-28 04:38 2026-05-27 Show GitHub Exploit DB Packet Storm
2946 5.9 MEDIUM
Network 		putty putty PuTTY 0.72 before 0.84 has a double free in RSA KEX. CWE-415
 Double Free 		CVE-2026-48850 2026-05-28 04:14 2026-05-26 Show GitHub Exploit DB Packet Storm
2947 3.1 LOW
Network 		putty putty PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session. CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-48851 2026-05-28 04:12 2026-05-26 Show GitHub Exploit DB Packet Storm
2948 3.7 LOW
Network 		putty putty PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. CWE-617
 Reachable Assertion 		CVE-2026-48852 2026-05-28 04:11 2026-05-26 Show GitHub Exploit DB Packet Storm
2949 5.3 MEDIUM
Local 		squirrel-lang squirrel A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a manipulation results … CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow 		CVE-2026-9541 2026-05-28 03:48 2026-05-26 Show GitHub Exploit DB Packet Storm
2950 9.8 CRITICAL
Network 		perl perl Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of th… CWE-680
 Integer Overflow to Buffer Overflow 		CVE-2026-8376 2026-05-28 03:43 2026-05-26 Show GitHub Exploit DB Packet Storm