Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
291	4.3	警告 Network	Zoho	Zoho Mail for WordPress	WordPress用プラグインZoho Mail for WordPressにおけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 同一生成元ポリシー違反	CVE-2026-8174	2026-06-3 12:07	2026-06-3	Show	GitHub Exploit DB Packet Storm

292	5	警告 Local	キヤノン株式会社	CUPS Printer Driver for macOS My Image Garden for macOS	キヤノン製My Image Garden for macOSおよびCUPS Printer Driver for macOSにおけるファイルアクセス時のリンク解釈が不適切な脆弱性 New	CWE-59 リンク解釈の問題	CVE-2026-6891 CVE-2026-6892	2026-06-1 14:21	2026-05-29	Show	GitHub Exploit DB Packet Storm

293	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月28日） New	-	-	2026-06-1 14:21	2026-05-29	Show	GitHub Exploit DB Packet Storm

294	7.8	重要 Local	エフサステクノロジーズ株式会社	ServerView Agents for Windows	ServerView Agents for Windowsにおける複数の脆弱性 New	CWE-Other その他	CVE-2026-27788 CVE-2026-32325	2026-06-1 12:15	2026-06-1	Show	GitHub Exploit DB Packet Storm

295	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月26日）	-	-	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

296	-	-	Casbin	Casdoor	Casdoorにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6815	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

297	9.8	緊急 Network	nx	Nx Console	nxのNx Consoleにおける埋め込まれた悪意のあるコードに関する脆弱性	CWE-506 埋め込まれた悪意のあるコード	CVE-2026-48027	2026-05-29 11:20	2026-05-27	Show	GitHub Exploit DB Packet Storm

298	9.8	緊急 Network	Jenkins プロジェクト	GitBucket	GitBucketにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25332	2026-05-29 11:20	2026-05-17	Show	GitHub Exploit DB Packet Storm

299	7.5	重要 Network	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47942	2026-05-29 11:20	2026-05-16	Show	GitHub Exploit DB Packet Storm

300	7.3	重要 Local	Airbus	TETRA Connectivity Server	AirbusのTETRA Connectivity Serverにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-7024	2026-05-29 11:20	2026-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1921	9.1	CRITICAL Network	-	-	Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static backend safety sca…	CWE-78 OS Command	CVE-2026-44444	2026-05-28 00:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

1922	-		-	-	An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/actions_addupdatedelete.inc.php	-	CVE-2026-37711	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

1923	-		-	-	Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).	-	CVE-2026-31266	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

1924	-		-	-	A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0.	-	CVE-2026-30498	2026-05-28 00:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

1925	2.7	LOW Network	gtranslate	gtranslate	Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.…	CWE-471 Modification of Assumed-Immutable Data (MAID)	CVE-2026-8492	2026-05-28 00:15	2026-05-20	Show	GitHub Exploit DB Packet Storm

1926	9.8	CRITICAL Network	date_ical_project	date_ical	Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15.	CWE-862 Missing Authorization	CVE-2026-8495	2026-05-28 00:14	2026-05-20	Show	GitHub Exploit DB Packet Storm

1927	5.4	MEDIUM Network	colorbox_inline_project	colorbox_inline	Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: fr…	CWE-79 Cross-site Scripting	CVE-2026-8493	2026-05-28 00:08	2026-05-20	Show	GitHub Exploit DB Packet Storm

1928	3.7	LOW Network	adcisolutions	node_view_permissions	Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-8491	2026-05-28 00:00	2026-05-20	Show	GitHub Exploit DB Packet Storm

1929	9.1	CRITICAL Network	-	-	Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(fullPath) call throws, the method falls back to a dirname/basename split and only validates the directory …	CWE-88 Argument Injection	CVE-2026-44449	2026-05-27 23:57	2026-05-27	Show	GitHub Exploit DB Packet Storm

1930	9.9	CRITICAL Network	-	-	Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary names but forwards the args array to the …	CWE-88 Argument Injection	CVE-2026-44450	2026-05-27 23:57	2026-05-27	Show	GitHub Exploit DB Packet Storm