Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2211 6.5 警告
Network
hono hono honoにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-44456 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2212 5.3 警告
Network
hono hono honoにおける重要な情報を含むキャッシュの使用に関する脆弱性 CWE-524
重要な情報を含むキャッシュの使用
CVE-2026-44457 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2213 4.3 警告
Network
hono hono honoにおける複数の脆弱性 CWE-116
CWE-74
CVE-2026-44458 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2214 3.8
Network
hono hono honoにおける入力で指定された数量の不適切な検証に関する脆弱性 CWE-1284
入力で指定された数量の不適切な検証
CVE-2026-44459 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2215 7.5 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-44573 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2216 8.1 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-44574 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2217 7.5 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-44575 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2218 5.9 警告
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44577 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
2219 10 緊急
Network
Peerigon angular-expressions Peerigonのangular-expressionsにおけるEval インジェクションに関する脆弱性 CWE-95
Evalインジェクション
CVE-2026-44643 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
2220 7.7 重要
Network
Grav CMS grav Grav CMSのgravにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44738 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2391 6.5 MEDIUM
Network
- - An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in a SQL SELECT command. … CWE-89
SQL Injection
CVE-2026-40849 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2392 7.5 HIGH
Network
- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData function due to improper neutralization of special elements in a SQL SELECT command… CWE-89
SQL Injection
CVE-2026-40850 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2393 8.4 HIGH
Local
- - A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity … CWE-1287
 Improper Validation of Specified Type of Input
CVE-2026-40851 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2394 7.2 HIGH
Network
- - A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it … CWE-78
OS Command 
CVE-2026-40852 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2395 5.5 MEDIUM
Local
- - A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access sensitive user data. CWE-285
Improper Authorization
CVE-2025-43289 2026-05-27 23:51 2026-05-27 Show GitHub Exploit DB Packet Storm
2396 5.5 MEDIUM
Local
- - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file … CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2025-43290 2026-05-27 23:51 2026-05-27 Show GitHub Exploit DB Packet Storm
2397 7.8 HIGH
Local
- - A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges. CWE-269
 Improper Privilege Management
CVE-2025-43306 2026-05-27 23:51 2026-05-27 Show GitHub Exploit DB Packet Storm
2398 5.5 MEDIUM
Local
- - A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data. CWE-284
Improper Access Control
CVE-2025-43451 2026-05-27 23:51 2026-05-27 Show GitHub Exploit DB Packet Storm
2399 5.5 MEDIUM
Local
- - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination. CWE-125
Out-of-bounds Read
CVE-2025-46280 2026-05-27 23:51 2026-05-27 Show GitHub Exploit DB Packet Storm
2400 7.0 HIGH
Local
- - A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to gain root privileges. CWE-362
Race Condition
CVE-2025-46284 2026-05-27 23:51 2026-05-27 Show GitHub Exploit DB Packet Storm