Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
21 7.5 重要
Network 		Mtrudel Bandit MtrudelのBanditにおける無限ループに関する脆弱性 New CWE-835
無限ループ 		CVE-2026-39806 2026-05-25 10:25 2026-05-13 Show GitHub Exploit DB Packet Storm
22 7.5 重要
Network 		Quarkiverse Hub Quarkus OpenAPI Generator Quarkiverse HubのQuarkus OpenAPI Generatorにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-40180 2026-05-25 10:25 2026-04-10 Show GitHub Exploit DB Packet Storm
23 8.8 重要
Network 		OWASP OWASP BLT OWASPのOWASP BLTにおける複数の脆弱性 New CWE-94
CWE-95
CVE-2026-40316 2026-05-25 10:25 2026-04-15 Show GitHub Exploit DB Packet Storm
24 7.5 重要
Network 		WebOnyx graphql-php WebOnyxのgraphql-phpにおけるアルゴリズムの複雑さに関する脆弱性 New CWE-407
アルゴリズムの複雑性 		CVE-2026-40476 2026-05-25 10:25 2026-04-17 Show GitHub Exploit DB Packet Storm
25 5.9 警告
Network 		Jeffrey Stedfast (jstedfast) MailKit Jeffrey Stedfast (jstedfast)のMailKitにおけるインジェクションに関する脆弱性 New CWE-74
インジェクション 		CVE-2026-41319 2026-05-25 10:25 2026-04-24 Show GitHub Exploit DB Packet Storm
26 9.8 緊急
Network 		pgx project pgx JackcのpgxにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2026-41889 2026-05-25 10:25 2026-05-8 Show GitHub Exploit DB Packet Storm
27 5.4 警告
Network 		reconurge Flowsint Flowsintにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42159 2026-05-25 10:25 2026-05-14 Show GitHub Exploit DB Packet Storm
28 8.6 重要
Network 		MagicMirror MagicMirror MagicMirrorにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42281 2026-05-25 10:25 2026-05-14 Show GitHub Exploit DB Packet Storm
29 6.1 警告
Network 		Absinthe-graphql Absinthe.Plug (absinthe plug) Absinthe-graphqlのAbsinthe.Plug (absinthe plug)におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42794 2026-05-25 10:25 2026-05-8 Show GitHub Exploit DB Packet Storm
30 4.3 警告
Network 		Getinboxzero Inbox Zero GetinboxzeroのInbox Zeroにおける情報漏えいに関する脆弱性 New CWE-200
CWE-noinfo
CVE-2026-42865 2026-05-25 10:25 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1051 8.6 HIGH
Network 		mozilla firefox
thunderbird 		Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-668
CWE-693
 Exposure of Resource to Wrong Sphere
 Protection Mechanism Failure 		CVE-2026-8958 2026-05-21 00:01 2026-05-19 Show GitHub Exploit DB Packet Storm
1052 9.3 CRITICAL
Network 		mozilla firefox
thunderbird 		Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-346
 Origin Validation Error 		CVE-2026-8950 2026-05-21 00:00 2026-05-19 Show GitHub Exploit DB Packet Storm
1053 7.5 HIGH
Network 		mozilla firefox
thunderbird 		Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-8963 2026-05-20 23:57 2026-05-19 Show GitHub Exploit DB Packet Storm
1054 7.5 HIGH
Network 		mozilla firefox
thunderbird 		Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-8964 2026-05-20 23:57 2026-05-19 Show GitHub Exploit DB Packet Storm
1055 7.5 HIGH
Network 		mozilla firefox
thunderbird 		Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-8968 2026-05-20 23:56 2026-05-19 Show GitHub Exploit DB Packet Storm
1056 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-693
 Protection Mechanism Failure 		CVE-2026-8969 2026-05-20 23:55 2026-05-19 Show GitHub Exploit DB Packet Storm
1057 9.1 CRITICAL
Network 		mozilla firefox
thunderbird 		Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-942
 Permissive Cross-domain Policy with Untrusted Domains 		CVE-2026-8948 2026-05-20 23:53 2026-05-19 Show GitHub Exploit DB Packet Storm
1058 7.5 HIGH
Network 		mozilla firefox
thunderbird 		Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-190
 Integer Overflow or Wraparound 		CVE-2026-8949 2026-05-20 23:49 2026-05-19 Show GitHub Exploit DB Packet Storm
1059 6.5 MEDIUM
Network 		mozilla firefox Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151. CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-8951 2026-05-20 23:48 2026-05-19 Show GitHub Exploit DB Packet Storm
1060 6.5 MEDIUM
Network 		mozilla firefox
thunderbird 		Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-346
 Origin Validation Error 		CVE-2026-8971 2026-05-20 23:41 2026-05-19 Show GitHub Exploit DB Packet Storm