Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2961 7.1 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-31774 2026-05-8 12:24 2026-05-1 Show GitHub Exploit DB Packet Storm
2962 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31775 2026-05-8 12:24 2026-05-1 Show GitHub Exploit DB Packet Storm
2963 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2026-31776 2026-05-8 12:24 2026-05-1 Show GitHub Exploit DB Packet Storm
2964 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31777 2026-05-8 12:24 2026-05-1 Show GitHub Exploit DB Packet Storm
2965 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-31786 2026-05-8 12:23 2026-04-30 Show GitHub Exploit DB Packet Storm
2966 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 CWE-415
二重解放
CVE-2026-31787 2026-05-8 12:23 2026-04-30 Show GitHub Exploit DB Packet Storm
2967 7.8 重要
Local
マイクロソフト Azure Monitor Agent Azure Monitor エージェントの特権昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2026-32168 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
2968 7.8 重要
Local
マイクロソフト Azure Monitor Agent Azure Monitor エージェントの特権昇格の脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-32192 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
2969 5.9 警告
Network
マイクロソフト Microsoft .NET Framework .NET Framework のサービス拒否の脆弱性 CWE-362
競合状態
CVE-2026-32226 2026-05-8 12:23 2026-04-14 Show GitHub Exploit DB Packet Storm
2970 8.8 重要
Network
Kubernetes ingress-nginx Kubernetesのingress-nginxにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-3288 2026-05-8 12:23 2026-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1931 4.4 MEDIUM
Local
- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently ignores EACCES errors when opening /dev/input/event* nodes, causing pusb_has_vi… CWE-390
CWE-693
 Detection of Error Condition Without Action
 Protection Mechanism Failure
CVE-2026-48792 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
1932 4.6 MEDIUM
Physics
- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return values of udisks_drive_get_serial(), udisks_drive_get_vendor(), and u… CWE-476
 NULL Pointer Dereference
CVE-2026-44710 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
1933 8.2 HIGH
Local
- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such as $(id>/tmp/rce) in the config causes root RCE when pamusb-conf --reset-pads is… CWE-78
CWE-88
OS Command 
Argument Injection
CVE-2026-44712 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
1934 8.8 HIGH
Local
- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the user's $TMUX environment variable, splits it on commas, and interpolates the so… CWE-78
CWE-116
OS Command 
 Improper Encoding or Escaping of Output
CVE-2026-44713 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
1935 7.4 HIGH
Network
- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remote feature checks utmpx ut_addr_v6 to detect whether an authentication request o… CWE-284
Improper Access Control
CVE-2026-47269 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
1936 6.3 MEDIUM
Local
- - pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM module loaded into the host process (sudo, login, GDM, GNOME Shell). Display manage… CWE-362
Race Condition
CVE-2026-47270 2026-05-28 22:57 2026-05-28 Show GitHub Exploit DB Packet Storm
1937 6.1 MEDIUM
Network
apache echarts A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versions prior to 6.1.0,… CWE-79
Cross-site Scripting
CVE-2026-45249 2026-05-28 22:48 2026-05-25 Show GitHub Exploit DB Packet Storm
1938 6.5 MEDIUM
Network
apache shiro Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1… CWE-384
 Session Fixation
CVE-2026-43827 2026-05-28 22:47 2026-05-26 Show GitHub Exploit DB Packet Storm
1939 6.5 MEDIUM
Network
apache shiro Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommen… CWE-614
 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2026-43828 2026-05-28 22:45 2026-05-26 Show GitHub Exploit DB Packet Storm
1940 4.3 MEDIUM
Network
- - The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_… CWE-862
 Missing Authorization
CVE-2026-4888 2026-05-28 22:45 2026-05-28 Show GitHub Exploit DB Packet Storm