Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3291	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22740	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

3292	3.1	低 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおける重要な情報を含むキャッシュの使用に関する脆弱性	CWE-524 重要な情報を含むキャッシュの使用	CVE-2026-22741	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

3293	5.3	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22745	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

3294	8.8	重要 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP Serverにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-23918	2026-05-7 11:28	2026-05-4	Show	GitHub Exploit DB Packet Storm

3295	8.8	重要 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-24072	2026-05-7 11:28	2026-05-4	Show	GitHub Exploit DB Packet Storm

3296	9.8	緊急 Network	NVIDIA	nvflare	NVIDIAのnvflareにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-24178	2026-05-7 11:28	2026-04-28	Show	GitHub Exploit DB Packet Storm

3297	8.8	重要 Network	NVIDIA	nvflare	NVIDIAのnvflareにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-24186	2026-05-7 11:28	2026-04-28	Show	GitHub Exploit DB Packet Storm

3298	6.5	警告 Network	NVIDIA	nvflare	NVIDIAのnvflareにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24204	2026-05-7 11:28	2026-04-28	Show	GitHub Exploit DB Packet Storm

3299	5.3	警告 Network	GNOME Project レッドハット	Red Hat Enterprise Linux libsoup	GNOME Project等の複数ベンダの製品におけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-2708	2026-05-7 11:28	2026-04-23	Show	GitHub Exploit DB Packet Storm

3300	7.1	重要 Network	Nimiq	Nimiq Proof of Stake (core-rs-albatross)	NimiqのNimiq Proof of Stake (core-rs-albatross)におけるデータの整合性検証不備に関する脆弱性	CWE-354 データの整合性検証不備	CVE-2026-28402	2026-05-7 11:28	2026-02-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1471	-		-	-	MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU-accelerated brute f…	CWE-328 Use of Weak Hash	CVE-2026-45413	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1472	7.4	HIGH Network	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who can MITM the TLS connection between the client and the IDP (within the TI netwo…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-45575	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1473	6.5	MEDIUM Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic he…	CWE-306 Missing Authentication for Critical Function	CVE-2026-47672	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1474	8.1	HIGH Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45…	CWE-295 Improper Certificate Validation	CVE-2026-44900	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1475	8.1	HIGH Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor can present any TLS c…	CWE-295 Improper Certificate Validation	CVE-2026-45574	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1476	-		-	-	Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job", ...) handler in 'El…	CWE-862 Missing Authorization	CVE-2026-48592	2026-05-28 04:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

1477	-		-	-	Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to sched…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-48593	2026-05-28 04:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

1478	5.9	MEDIUM Network	putty	putty	PuTTY 0.72 before 0.84 has a double free in RSA KEX.	CWE-415 Double Free	CVE-2026-48850	2026-05-28 04:14	2026-05-26	Show	GitHub Exploit DB Packet Storm

1479	3.1	LOW Network	putty	putty	PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-48851	2026-05-28 04:12	2026-05-26	Show	GitHub Exploit DB Packet Storm

1480	3.7	LOW Network	putty	putty	PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.	CWE-617 Reachable Assertion	CVE-2026-48852	2026-05-28 04:11	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed