Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3171	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6533	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3172	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6534	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3173	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6535	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3174	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6536	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3175	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6537	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3176	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6538	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3177	4.4	警告 Local	notepad-plus-plus	notepad++	notepad-plus-plusのnotepad++における書式文字列に関する脆弱性	CWE-134 書式文字列の問題	CVE-2026-6539	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3178	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6867	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3179	7.5	重要 Network	Wireshark	Wireshark	Wiresharkにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6868	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3180	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6869	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1511	4.3	MEDIUM Network	-	-	PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality	CWE-79 Cross-site Scripting	CVE-2026-36239	2026-05-28 03:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

1512	5.2	MEDIUM Adjacent	-	-	SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts VIEW intents with javascript: URI…	CWE-79 Cross-site Scripting	CVE-2025-68709	2026-05-28 03:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

1513	9.8	CRITICAL Network	ibm	websphere_application_server	IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code executi…	CWE-94 Code Injection	CVE-2026-8633	2026-05-28 03:12	2026-05-27	Show	GitHub Exploit DB Packet Storm

1514	7.8	HIGH Local	openvpn	connect	Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel	CWE-78 CWE-267 CWE-270 CWE-648 OS Command Privilege Defined With Unsafe Actions Privilege Context Switching Error Incorrect Use of Privileged APIs	CVE-2026-9560	2026-05-28 03:08	2026-05-27	Show	GitHub Exploit DB Packet Storm

1515	4.3	MEDIUM Network	-	-	Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2.	CWE-862 Missing Authorization	CVE-2026-49054	2026-05-28 02:44	2026-05-28	Show	GitHub Exploit DB Packet Storm

1516	9.1	CRITICAL Network	-	-	HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets magic prefixes: '\| cm…	CWE-73 CWE-78 External Control of File Name or Path OS Command	CVE-2026-8450	2026-05-28 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

1517	7.3	HIGH Network	-	-	IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in …	CWE-95 Eval Injection	CVE-2026-48962	2026-05-28 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

1518	4.3	MEDIUM Network	-	-	Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of cred…	CWE-269 Improper Privilege Management	CVE-2026-48926	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

1519	6.6	MEDIUM Network	-	-	Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-48916	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

1520	-		-	-	Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available…	CWE-506 Embedded Malicious Code	CVE-2026-48027	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed