Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3741 10 緊急
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-183
CWE-441
CWE-918
CVE-2026-42043 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3742 9.1 緊急
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-1321
CWE-915
CVE-2026-42044 2026-04-30 12:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3743 8.8 重要
Network 		HashiCorp Vault HashiCorpのVaultにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
送信データへの重要な情報の挿入 		CVE-2026-4525 2026-04-30 12:25 2026-04-17 Show GitHub Exploit DB Packet Storm
3744 4.9 警告
Network 		IBM IBM Guardium Data Protection IBMのIBM Guardium Data Protectionにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-4917 2026-04-30 12:25 2026-04-23 Show GitHub Exploit DB Packet Storm
3745 4.8 警告
Network 		IBM IBM Guardium Data Protection IBMのIBM Guardium Data Protectionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-4918 2026-04-30 12:25 2026-04-23 Show GitHub Exploit DB Packet Storm
3746 4.8 警告
Network 		IBM IBM Guardium Data Protection IBMのIBM Guardium Data Protectionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-4919 2026-04-30 12:25 2026-04-23 Show GitHub Exploit DB Packet Storm
3747 8.6 重要
Network 		HashiCorp Vault HashiCorpのVaultにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-5052 2026-04-30 12:25 2026-04-17 Show GitHub Exploit DB Packet Storm
3748 6.5 警告
Network 		Rapid7 velociraptor Rapid7のvelociraptorにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-5329 2026-04-30 12:25 2026-04-9 Show GitHub Exploit DB Packet Storm
3749 7.5 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-5477 2026-04-30 12:24 2026-04-10 Show GitHub Exploit DB Packet Storm
3750 5.9 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-5500 2026-04-30 12:24 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 9.8 CRITICAL
Network 		- - There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access) An unauthenticated remote attacker can access configured databases in a DIAView project. New CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-9642 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
622 7.1 HIGH
Network 		- - A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject A… New CWE-295
Improper Certificate Validation  		CVE-2026-42012 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
623 8.2 HIGH
Network 		- - A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) fiel… New CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-42013 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
624 5.3 MEDIUM
Network 		- - A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when app… New CWE-193
 Off-by-one Error 		CVE-2026-42015 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
625 8.2 HIGH
Network 		- - A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a sho… New CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-5260 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
626 6.5 MEDIUM
Network 		- - Tanium addressed a denial of service vulnerability in Tanium Server. New CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2026-9156 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
627 5.8 MEDIUM
Local 		- - When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value']['result']['compile_… New CWE-22
Path Traversal 		CVE-2026-41009 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
628 5.0 MEDIUM
Local 		- - AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads response['value']['result']['compile_log_id'] (line 332-338… New CWE-284
Improper Access Control 		CVE-2026-41704 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
629 7.8 HIGH
Local 		- - Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspecified vectors. New CWE-427
 Uncontrolled Search Path Element 		CVE-2023-52945 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
630 6.8 MEDIUM
Local 		- - Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to conduct denial-of-service attacks… New CWE-552
 Files or Directories Accessible to External Parties 		CVE-2024-11399 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm