Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2191	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43172	2026-05-15 10:58	2026-05-6	Show	GitHub Exploit DB Packet Storm

2192	6.2	警告 Local	アップル	tvOS iOS iPadOS	アップルのiPadOS等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-43653	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2193	7.3	重要 Network	アップル	tvOS iOS iPadOS watchOS	アップルのiPadOS等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43655	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2194	7.3	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43656	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2195	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-43658	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2196	6.2	警告 Local	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43666	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2197	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43668	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2198	5.5	警告 Local	jqlang	jq	jqlangのjqにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-43894	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2199	4.4	警告 Local	jqlang	jq	jqlangのjqにおける複数の脆弱性	CWE-158 CWE-20	CVE-2026-43895	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

2200	5.5	警告 Local	jqlang	jq	jqlangのjqにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-43896	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2421	7.5	HIGH Network	dell	unisphere_for_powermax_virtual_appliance	Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX application running in vApp	CWE-285 Improper Authorization	CVE-2022-34363	2026-05-30 00:53	2026-05-23	Show	GitHub Exploit DB Packet Storm

2422	6.5	MEDIUM Network	golang	net	Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.	CWE-400 Uncontrolled Resource Consumption	CVE-2026-25680	2026-05-30 00:47	2026-05-23	Show	GitHub Exploit DB Packet Storm

2423	6.5	MEDIUM Network	-	-	The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates are valid when sendi…	CWE-295 Improper Certificate Validation	CVE-2026-44213	2026-05-30 00:42	2026-05-27	Show	GitHub Exploit DB Packet Storm

2424	7.1	HIGH Network	-	-	Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token…	CWE-863 Incorrect Authorization	CVE-2026-42280	2026-05-30 00:42	2026-05-28	Show	GitHub Exploit DB Packet Storm

2425	7.5	HIGH Network	-	-	opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics en…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2026-44902	2026-05-30 00:42	2026-05-28	Show	GitHub Exploit DB Packet Storm

2426	-		-	-	go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in …	CWE-116 Improper Encoding or Escaping of Output	CVE-2026-45570	2026-05-30 00:42	2026-05-28	Show	GitHub Exploit DB Packet Storm

2427	5.4	MEDIUM Network	-	-	go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside…	CWE-22 Path Traversal	CVE-2026-45571	2026-05-30 00:42	2026-05-28	Show	GitHub Exploit DB Packet Storm

2428	-		-	-	go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs from upstream Git. When commit o…	CWE-180 CWE-345 Incorrect Behavior Order: Validate Before Canonicalize Insufficient Verification of Data Authenticity	CVE-2026-45022	2026-05-30 00:42	2026-05-28	Show	GitHub Exploit DB Packet Storm

2429	-		-	-	Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP security guidelines. Howev…	CWE-942 Permissive Cross-domain Policy with Untrusted Domains	CVE-2026-9739	2026-05-30 00:42	2026-05-28	Show	GitHub Exploit DB Packet Storm

2430	5.3	MEDIUM Network	-	-	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggag…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-45292	2026-05-30 00:42	2026-05-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed