Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1761 7.5 重要
Network
PgBouncer PgBouncer PgBouncerにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-6666 2026-05-18 12:09 2026-05-9 Show GitHub Exploit DB Packet Storm
1762 4.3 警告
Network
PgBouncer PgBouncer PgBouncerにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-6667 2026-05-18 12:09 2026-05-9 Show GitHub Exploit DB Packet Storm
1763 5.3 警告
Network
Haxx cURL HaxxのcURLにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-7009 2026-05-18 12:09 2026-05-13 Show GitHub Exploit DB Packet Storm
1764 5.3 警告
Network
Haxx cURL HaxxのcURLにおけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避
CVE-2026-7168 2026-05-18 12:09 2026-05-13 Show GitHub Exploit DB Packet Storm
1765 3.5
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-7471 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
1766 5.4 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-7481 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
1767 5.5 警告
Local
GPAC GPAC GPACにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-8124 2026-05-18 12:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1768 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-8144 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
1769 6.5 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-8280 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
1770 6.5 警告
Network
Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース
CVE-2026-8291 2026-05-18 12:09 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2751 7.0 HIGH
Local
- - A command injection vulnerability was discovered in the `rpmuncompress` utility of RPM. When extracting certain archive formats (ZIP, 7z, GEM) to a specified destination directory, the tool inserts t… CWE-78
OS Command 
CVE-2026-44604 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2752 7.7 HIGH
Network
- - A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing … CWE-59
Link Following
CVE-2026-9804 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2753 5.4 MEDIUM
Network
apache shiro With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro. This issue affects Apache Shiro from 2.0-alpha… CWE-601
CWE-918
Open Redirect
Server-Side Request Forgery (SSRF) 
CVE-2026-44598 2026-05-28 22:44 2026-05-26 Show GitHub Exploit DB Packet Storm
2754 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the raw user-supplied con… CWE-79
Cross-site Scripting
CVE-2026-44708 2026-05-28 22:44 2026-05-27 Show GitHub Exploit DB Packet Storm
2755 - - - In the Linux kernel, the following vulnerability has been resolved: selinux: use sk blob accessor in socket permission helpers SELinux socket state lives in the composite LSM socket blob. sock_has… - CVE-2026-46104 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2756 - - - In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() Sashiko points out there are two bugs here in the error u… - CVE-2026-46126 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2757 - - - In the Linux kernel, the following vulnerability has been resolved: KVM: x86: check for nEPT/nNPT in slow flush hypercalls Checking is_guest_mode(vcpu) is incorrect, because translate_nested_gpa() … - CVE-2026-46131 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2758 - - - In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration cros_typec_register_thunderbolt() missed initializing the … - CVE-2026-46134 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2759 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtk_usb_hci_wmt_sync() casts the WMT event response SKB da… - CVE-2026-46140 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm
2760 - - - In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF restricted register. When a VF is initialized, attempt… - CVE-2026-46142 2026-05-28 22:44 2026-05-28 Show GitHub Exploit DB Packet Storm