Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4271	7.5	重要 Network	lxml	lxml	lxmlにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-41066	2026-04-30 12:27	2026-04-24	Show	GitHub Exploit DB Packet Storm

4272	7.7	重要 Network	The Kyverno Authors	Kyverno	The Kyverno AuthorsのKyvernoにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41068	2026-04-30 12:27	2026-04-24	Show	GitHub Exploit DB Packet Storm

4273	8.8	重要 Network	pyLoad	pyLoad	pyLoadにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-41133	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

4274	8.2	重要 Network	Minio Inc.	Minio	Minio Inc.のMinioにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-41145	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

4275	9.8	緊急 Network	JetBrains	Junie	JetBrainsのJunieにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-41153	2026-04-30 12:27	2026-04-17	Show	GitHub Exploit DB Packet Storm

4276	8.1	重要 Network	Statamic	Statamic	Statamicにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性	CWE-470 クラスまたはコードを選択する外部から制御された入力の使用	CVE-2026-41175	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

4277	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41176	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4278	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける複数の脆弱性	CWE-306 CWE-78	CVE-2026-41179	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4279	9.9	緊急 Network	Froxlor	Froxlor	FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2026-41228	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

4280	9.1	緊急 Network	Froxlor	Froxlor	Froxlorにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41229	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
371	-		-	-	DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sour… New	CWE-93 CWE-150 CRLF Injection Improper Neutralization of Escape, Meta, or Control Sequences	CVE-2026-11362	2026-06-6 02:04	2026-06-6	Show	GitHub Exploit DB Packet Storm

372	6.5	MEDIUM Network	-	-	7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an An uninitialized memory disclosure vulnerability in the UEFI capsule (.scap) parser in 7-Zip. The OpenCa… New	CWE-908 Use of Uninitialized Resource	CVE-2026-48101	2026-06-6 02:04	2026-06-6	Show	GitHub Exploit DB Packet Storm

373	3.1	LOW Network	-	-	7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image handler's File Identifier Descriptor parse… New	CWE-125 Out-of-bounds Read	CVE-2026-48102	2026-06-6 02:04	2026-06-6	Show	GitHub Exploit DB Packet Storm

374	-		-	-	DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send_s… New	CWE-93 CWE-150 CRLF Injection Improper Neutralization of Escape, Meta, or Control Sequences	CVE-2026-9270	2026-06-6 02:04	2026-06-6	Show	GitHub Exploit DB Packet Storm

375	5.5	MEDIUM Local	linaro	op-tee	OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.3.0 and prior t… New	CWE-843 Type Confusion	CVE-2026-45702	2026-06-6 01:56	2026-06-4	Show	GitHub Exploit DB Packet Storm

376	7.5	HIGH Network	microsoft	exchange_online	Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. New	CWE-285 Improper Authorization	CVE-2026-48579	2026-06-6 01:51	2026-06-5	Show	GitHub Exploit DB Packet Storm

377	8.8	HIGH Network	dlink	dwr-m920_firmware	A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument action_value results in… New	CWE-74 CWE-77 Injection Command Injection	CVE-2026-10878	2026-06-6 01:48	2026-06-5	Show	GitHub Exploit DB Packet Storm

378	3.1	LOW Network	google	chrome	Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy… New	CWE-20 Improper Input Validation	CVE-2026-11244	2026-06-6 01:43	2026-06-5	Show	GitHub Exploit DB Packet Storm

379	5.4	MEDIUM Network	google	chrome	Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) New	CWE-346 Origin Validation Error	CVE-2026-11243	2026-06-6 01:43	2026-06-5	Show	GitHub Exploit DB Packet Storm

380	9.8	CRITICAL Network	microsoft	azure_horizondb	Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network. New	CWE-290 Authentication Bypass by Spoofing	CVE-2026-48567	2026-06-6 01:30	2026-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed