Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
331 9.8 緊急
Network 		9bis KiTTY KovidgoyalのKittyにおける複数の脆弱性 New CWE-125
CWE-190
CWE-787
CVE-2026-33642 2026-05-28 14:33 2026-05-19 Show GitHub Exploit DB Packet Storm
332 7.5 重要
Network 		Tatsuhiro-t Ngtcp2 Tatsuhiro-tのNgtcp2におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-40170 2026-05-28 14:33 2026-04-16 Show GitHub Exploit DB Packet Storm
333 7.8 重要
Local 		opentelemetry OpenTelemetry.Exporter.OpenTelemetryProtocol opentelemetryのOpenTelemetry.Exporter.OpenTelemetryProtocolにおけるアクセスパーミションのディレクトリの一時ファイル作成に関する脆弱性 New CWE-379
不適切なアクセスパーミションのディレクトリに一時ファイル作成 		CVE-2026-42191 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
334 7.5 重要
Network 		Absinthe-graphql Absinthe Absinthe-graphqlのAbsintheにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42793 2026-05-28 14:32 2026-05-8 Show GitHub Exploit DB Packet Storm
335 7.5 重要
Network 		Absinthe-graphql Absinthe Absinthe-graphqlのAbsintheにおけるアルゴリズムの複雑さに関する脆弱性 New CWE-407
アルゴリズムの複雑性 		CVE-2026-43967 2026-05-28 14:32 2026-05-8 Show GitHub Exploit DB Packet Storm
336 6.1 警告
Network 		The Kyverno Authors Policy-reporter-ui The Kyverno AuthorsのPolicy-reporter-uiにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44245 2026-05-28 14:32 2026-05-12 Show GitHub Exploit DB Packet Storm
337 8.6 重要
Network 		Marginal v1-core Marginalのv1-coreにおける数値型間の変換の誤りに関する脆弱性 New CWE-681
数値型間の変換の誤り 		CVE-2026-4931 2026-05-28 14:32 2026-04-7 Show GitHub Exploit DB Packet Storm
338 7.4 重要
Network 		Project Jupyter Jupyter Server Jupyter Serverにおけるオープンリダイレクトの脆弱性 New CWE-Other
その他 		CVE-2025-61669 2026-05-28 12:05 2026-05-28 Show GitHub Exploit DB Packet Storm
339 - - 日立 Hitachi Application Server
uCosminexus Application Runtime with Java for Apache Tomcat
uCosminexus Application Runtime with Java… 		Cosminexusにおける複数の脆弱性 - CVE-2026-22007
CVE-2026-22013
CVE-2026-22016
CVE-2026-22018
CVE-2026-22021
CVE-2026-23865
CVE-2026-34268
CVE-2026-34282 		2026-05-27 13:53 2026-05-26 Show GitHub Exploit DB Packet Storm
340 - - 日立 Hitachi Automation Director
Hitachi Replication Manager
Hitachi Configuration Manager
Hitachi Ops Center API Configuration Manager
H… 		Hitachi Command Suite製品, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics AdvisorおよびHitachi Ops Center製品における複数の脆弱性 - CVE-2026-22007
CVE-2026-22013
CVE-2026-22016
CVE-2026-22018
CVE-2026-22021
CVE-2026-23865
CVE-2026-34268
CVE-2026-34282 		2026-05-27 13:53 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318861 9.8 CRITICAL
Network 		vivotek sd9364_firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The mani… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2024-7441 2024-08-8 02:15 2024-08-4 Show GitHub Exploit DB Packet Storm
318862 - mozilla firefox Mozilla Firefox 1.0.7 and 1.5.0.1 allows remote attackers to cause a denial of service (crash) via an HTML tag with a large number of script action handlers such as onload and onmouseover, which trig… NVD-CWE-Other
CVE-2006-1273 2024-08-8 02:15 2006-03-19 Show GitHub Exploit DB Packet Storm
318863 - digital_builder nz_ecommerce Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issu… NVD-CWE-Other
CVE-2006-1096 2024-08-8 02:15 2006-03-9 Show GitHub Exploit DB Packet Storm
318864 - digital_builder nz_ecommerce Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendo… NVD-CWE-Other
CVE-2006-1098 2024-08-8 02:15 2006-03-9 Show GitHub Exploit DB Packet Storm
318865 - kwik-pay kwik-pay_payroll Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and p… NVD-CWE-Other
CVE-2006-1050 2024-08-8 02:15 2006-03-8 Show GitHub Exploit DB Packet Storm
318866 - virtual_communication_services vpmi_enterprise SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to execute arbitrary SQL commands via the UpdateID0 parameter to Service_Requests.… CWE-89
SQL Injection 		CVE-2006-0897 2024-08-8 02:15 2006-02-25 Show GitHub Exploit DB Packet Storm
318867 - dotproject dotproject dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in a… NVD-CWE-Other
CVE-2006-0754 2024-08-8 02:15 2006-02-18 Show GitHub Exploit DB Packet Storm
318868 - dotproject dotproject Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary commands via the baseDir parameter in (… NVD-CWE-Other
CVE-2006-0755 2024-08-8 02:15 2006-02-18 Show GitHub Exploit DB Packet Storm
318869 - dotproject dotproject dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after installation, which allows remote attackers to obtain sensitive configuration informa… NVD-CWE-Other
CVE-2006-0756 2024-08-8 02:15 2006-02-18 Show GitHub Exploit DB Packet Storm
318870 - wordpress wordpress Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) onblur in the "author'… NVD-CWE-Other
CVE-2006-0733 2024-08-8 02:15 2006-02-16 Show GitHub Exploit DB Packet Storm