Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2651 7.5 重要
Network 		ZTE ZXCLOUD iRAI ZTEのZXCLOUD iRAIにおける書式文字列に関する脆弱性 CWE-134
CWE-noinfo
CVE-2026-44407 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2652 2.7 低
Network 		Tanium Tanium Threat Response TaniumのTanium Threat Responseにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-6392 2026-05-13 10:21 2026-04-22 Show GitHub Exploit DB Packet Storm
2653 6.5 警告
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-6736 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2654 7.5 重要
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-7541 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2655 9.8 緊急
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおける複数の脆弱性 CWE-436
CWE-918
CVE-2026-8034 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2656 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-8063 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2657 5.4 警告
Network 		MISP MISP MISPにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-8080 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2658 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
CWE-noinfo
CVE-2026-8091 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2659 8.1 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-8092 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2660 8.1 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-8093 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1931 8.2 HIGH
Network 		- - phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows unauthenticated attackers to reset any user account password without token verificatio… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-35675 2026-05-29 23:16 2026-05-29 Show GitHub Exploit DB Packet Storm
1932 6.5 MEDIUM
Network 		apache ignite Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the server with "cmd=log" command and a log path crafted in a certain way. This iss… CWE-23
 Relative Path Traversal 		CVE-2025-48977 2026-05-29 23:11 2026-05-28 Show GitHub Exploit DB Packet Storm
1933 9.8 CRITICAL
Network 		inhandnetworks ir315_firmware
ir302_firmware
ir615_firmware
ir305_firmware 		A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier… CWE-77
Command Injection 		CVE-2026-38702 2026-05-29 23:09 2026-05-29 Show GitHub Exploit DB Packet Storm
1934 9.8 CRITICAL
Network 		inhandnetworks ir315_firmware
ir302_firmware
ir615_firmware
ir305_firmware 		A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier… CWE-77
Command Injection 		CVE-2026-38703 2026-05-29 23:09 2026-05-29 Show GitHub Exploit DB Packet Storm
1935 9.8 CRITICAL
Network 		inhandnetworks ir315_firmware
ir302_firmware
ir615_firmware
ir305_firmware 		A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier ve… CWE-77
Command Injection 		CVE-2026-38707 2026-05-29 23:08 2026-05-29 Show GitHub Exploit DB Packet Storm
1936 9.8 CRITICAL
Network 		inhandnetworks ir315_firmware
ir302_firmware
ir615_firmware
ir305_firmware 		A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlie… CWE-77
Command Injection 		CVE-2026-38704 2026-05-29 23:08 2026-05-29 Show GitHub Exploit DB Packet Storm
1937 8.6 HIGH
Network 		- - Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt st… CWE-193
 Off-by-one Error 		CVE-2026-49127 2026-05-29 23:07 2026-05-29 Show GitHub Exploit DB Packet Storm
1938 5.3 MEDIUM
Network 		- - Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability in the xspf_char_data function within the XSPF playlist plugin that allows attackers to embed literal CR/LF by… CWE-93
CRLF Injection 		CVE-2026-49130 2026-05-29 23:07 2026-05-29 Show GitHub Exploit DB Packet Storm
1939 5.8 MEDIUM
Network 		- - Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CURLOPT_REDIR_PROTOCOLS_STR, allow… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-49129 2026-05-29 23:07 2026-05-29 Show GitHub Exploit DB Packet Storm
1940 4.1 MEDIUM
Network 		- - A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endp… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-10052 2026-05-29 23:06 2026-05-29 Show GitHub Exploit DB Packet Storm