Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2571 9.8 緊急
Network 		vm2 project vm2 vm2 projectのvm2における複数の脆弱性 CWE-693
CWE-94
CVE-2026-24120 2026-05-11 11:12 2026-05-4 Show GitHub Exploit DB Packet Storm
2572 9.8 緊急
Network 		vm2 project vm2 vm2 projectのvm2における複数の脆弱性 CWE-693
CWE-94
CVE-2026-24781 2026-05-11 11:12 2026-05-4 Show GitHub Exploit DB Packet Storm
2573 6.3 警告
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-25077 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
2574 9.1 緊急
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-25199 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
2575 7.5 重要
Network 		マイクロソフト Microsoft 365 Copilot BizChat M365 Copilot の情報漏えいの脆弱性 CWE-138
特殊要素の不適切な無害化 		CVE-2026-26129 2026-05-11 11:12 2026-05-7 Show GitHub Exploit DB Packet Storm
2576 7.5 重要
Network 		マイクロソフト Microsoft 365 Copilot BizChat M365 Copilot の情報漏えいの脆弱性 CWE-74
インジェクション 		CVE-2026-26164 2026-05-11 11:12 2026-05-7 Show GitHub Exploit DB Packet Storm
2577 9.8 緊急
Network 		vm2 project vm2 vm2 projectのvm2における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-26956 2026-05-11 11:12 2026-05-4 Show GitHub Exploit DB Packet Storm
2578 6.5 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2026-27644 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
2579 5.4 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-27693 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
2580 5.4 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-27694 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1831 7.3 HIGH
Network 		- - An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call. CWE-20
 Improper Input Validation  		CVE-2026-30760 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
1832 5.5 MEDIUM
Local 		- - IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. _dosToUnixTime() decodes the local-file-header last-modification da… CWE-248
 Uncaught Exception 		CVE-2025-15649 2026-05-30 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1833 7.1 HIGH
Network 		- - LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_promp… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-45134 2026-05-30 01:12 2026-05-28 Show GitHub Exploit DB Packet Storm
1834 5.4 MEDIUM
Network 		- - AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute endpoint executes block… CWE-770
CWE-841
 Allocation of Resources Without Limits or Throttling
 Improper Enforcement of Behavioral Workflow 		CVE-2026-45023 2026-05-30 01:07 2026-05-29 Show GitHub Exploit DB Packet Storm
1835 7.5 HIGH
Network 		google chrome Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox vi… CWE-457
 Use of Uninitialized Variable 		CVE-2026-9963 2026-05-30 01:06 2026-05-29 Show GitHub Exploit DB Packet Storm
1836 7.5 HIGH
Network 		dell unisphere_for_powermax_virtual_appliance Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the  Unisphere for VMAX application running in vApp CWE-285
Improper Authorization 		CVE-2022-34363 2026-05-30 00:53 2026-05-23 Show GitHub Exploit DB Packet Storm
1837 6.5 MEDIUM
Network 		golang net Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-25680 2026-05-30 00:47 2026-05-23 Show GitHub Exploit DB Packet Storm
1838 6.5 MEDIUM
Network 		- - The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates are valid when sendi… CWE-295
Improper Certificate Validation  		CVE-2026-44213 2026-05-30 00:42 2026-05-27 Show GitHub Exploit DB Packet Storm
1839 7.1 HIGH
Network 		- - Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token… CWE-863
 Incorrect Authorization 		CVE-2026-42280 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
1840 7.5 HIGH
Network 		- - opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics en… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2026-44902 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm