Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2111	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43294	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

2112	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43295	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

2113	3.7	低 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-43514	2026-05-18 12:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

2114	7.5	重要 Network		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-43652	2026-05-18 12:13	2026-05-11	Show	GitHub Exploit DB Packet Storm

2115	7.5	重要 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-43654	2026-05-18 12:13	2026-05-11	Show	GitHub Exploit DB Packet Storm

2116	10	緊急 Network	vm2 project	vm2	vm2 projectのvm2におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-43997	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

2117	8.5	重要 Network	vm2 project	vm2	vm2 projectのvm2におけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-43998	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

2118	9.9	緊急 Network	vm2 project	vm2	vm2 projectのvm2における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-43999	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

2119	7.2	重要 Network	vm2 project	vm2	vm2 projectのvm2における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-44000	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

2120	8.6	重要 Network	vm2 project	vm2	vm2 projectのvm2におけるキャッチされない例外に関する脆弱性	CWE-248 キャッチされない例外	CVE-2026-44001	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2641	7.4	HIGH Network	-	-	A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows…	CWE-287 Improper Authentication	CVE-2026-46579	2026-05-29 23:06	2026-05-29	Show	GitHub Exploit DB Packet Storm

2642	5.4	MEDIUM Network	networktocode	nautobot	Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, in the case of inter-object references via GenericForeignKey (a pattern allowing an object to referen…	CWE-862 Missing Authorization	CVE-2026-44794	2026-05-29 22:29	2026-05-29	Show	GitHub Exploit DB Packet Storm

2643	6.5	MEDIUM Network	networktocode	nautobot	Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints (for example, /dcim/interfaces/rename/) were vulnerable to a…	CWE-400 CWE-1333 Uncontrolled Resource Consumption Inefficient Regular Expression Complexity	CVE-2026-44796	2026-05-29 22:27	2026-05-29	Show	GitHub Exploit DB Packet Storm

2644	8.5	HIGH Network	networktocode	nautobot	Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook data model and associated feature set could be configured by users with sufficient…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-44797	2026-05-29 22:26	2026-05-29	Show	GitHub Exploit DB Packet Storm

2645	-		-	-	Rejected reason: Further research determined the issue is not a vulnerability.	-	CVE-2026-45611	2026-05-29 22:16	2026-05-29	Show	GitHub Exploit DB Packet Storm

2646	4.4	MEDIUM Network	-	-	The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19. This is due to insufficient output escaping of imported snippet conte…	CWE-79 Cross-site Scripting	CVE-2026-7430	2026-05-29 22:09	2026-05-29	Show	GitHub Exploit DB Packet Storm

2647	4.3	MEDIUM Network	-	-	The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is due to insufficient acc…	CWE-200 Information Exposure	CVE-2026-8995	2026-05-29 22:09	2026-05-29	Show	GitHub Exploit DB Packet Storm

2648	5.3	MEDIUM Network	-	-	The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper verification of the `wo…	CWE-200 Information Exposure	CVE-2026-2128	2026-05-29 22:09	2026-05-29	Show	GitHub Exploit DB Packet Storm

2649	6.4	MEDIUM Network	-	-	The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio Items in all versions up to, and …	CWE-79 Cross-site Scripting	CVE-2025-14042	2026-05-29 22:09	2026-05-29	Show	GitHub Exploit DB Packet Storm

2650	7.2	HIGH Network	-	-	The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization an…	CWE-79 Cross-site Scripting	CVE-2025-11262	2026-05-29 22:09	2026-05-29	Show	GitHub Exploit DB Packet Storm