Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-23297 2026-06-3 17:02 2026-03-25 Show GitHub Exploit DB Packet Storm
232 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 New CWE-835
無限ループ
CVE-2026-23298 2026-06-3 17:02 2026-03-25 Show GitHub Exploit DB Packet Storm
233 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性 New CWE-772
有効なライフタイム後のリソースの解放の欠如
CVE-2026-23299 2026-06-3 17:02 2026-03-25 Show GitHub Exploit DB Packet Storm
234 8.1 重要
Network
phpBB phpBB phpBBにおけるパスワード管理機能に関する脆弱性 New CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2026-29199 2026-06-3 17:02 2026-05-4 Show GitHub Exploit DB Packet Storm
235 6.5 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2026-3117 2026-06-3 17:02 2026-05-18 Show GitHub Exploit DB Packet Storm
236 7.3 重要
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-33462 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
237 5.3 警告
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける有効期限後または解放後のリソースの操作に関する脆弱性 New CWE-672
有効期限後または解放後のリソースの操作
CVE-2026-33463 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
238 6.5 警告
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-33464 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
239 9.8 緊急
Network
オラクル Oracle Hospitality OPERA 5 Property Services オラクルのOracle Hospitality OPERA 5 Property Servicesにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-34311 2026-06-3 17:02 2026-05-28 Show GitHub Exploit DB Packet Storm
240 9.8 緊急
Network
IBM Engineering Lifecycle Management IBMのEngineering Lifecycle Managementにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-3660 2026-06-3 17:02 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1501 6.3 MEDIUM
Network
- - A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py. This manipulation causes i… CWE-285
CWE-863
Improper Authorization
 Incorrect Authorization
CVE-2026-10211 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1502 6.3 MEDIUM
Network
- - A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astrbot/core/astr_main_agent.py. Such manipulation of the argument session_id leads… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-10212 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1503 5.4 MEDIUM
Network
- - A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /api/skills/delete of the component API Endpoint. Performing a manipulation of t… CWE-22
Path Traversal
CVE-2026-10213 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1504 7.3 HIGH
Network
- - A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component Bash Tool. Executin… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10214 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1505 3.7 LOW
Network
- - A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown function of the file server/src/routes/pairing.ts of the component claim Endpoint. The manipulatio… CWE-307
CWE-799
mproper Restriction of Excessive Authentication Attempts
 Improper Control of Interaction Frequency
CVE-2026-10216 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1506 6.3 MEDIUM
Network
- - A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the file internal/http/tts_config.go of the component RoleAdmin Gateway. This manipul… CWE-266
CWE-269
 Incorrect Privilege Assignment
 Improper Privilege Management
CVE-2026-10217 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1507 5.4 MEDIUM
Network
- - A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3. This affects the function auth of the file internal/http/evolution_handlers.go. Such manipulation leads to improper authorizati… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-10218 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1508 7.3 HIGH
Network
- - A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. This impacts the function FsBridge.WriteFile of the file internal/sandbox/fsbridge.go of the component write_file Tool. Performing a… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10219 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1509 7.3 HIGH
Network
- - A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. Affected is the function _serve_plugin_skill/skill_view of the file tools/skills_tool.py. Executing a manipulation can lea… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2026-10220 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1510 6.3 MEDIUM
Network
- - A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_content of the file tools/memory_tool.py. This manipulation causes injection. The a… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2026-10223 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm