Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4951	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43012	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4952	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-43013	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4953	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43014	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4954	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43015	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4955	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43016	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4956	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-43045	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4957	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-43046	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4958	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43047	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4959	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43048	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

4960	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43049	2026-05-11 10:57	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
741	3.5	LOW Network	-	-	The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and outputting it on the Store Locator WordPress plugin before 1.6.9 admin page, all… Update	CWE-79 Cross-site Scripting	CVE-2026-9061	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

742	6.4	MEDIUM Network	-	-	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/{id} accepts and persists nonexistent ddns_p… Update	CWE-863 Incorrect Authorization	CVE-2026-53521	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

743	6.3	MEDIUM Network	-	-	Koel is a free, open-source music streaming solution. Prior to version 9.7.1, Koel contains a Server-Side Request Forgery (SSRF) vulnerability in the radio station creation endpoint (POST /api/radio/… Update	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-50552	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

744	7.3	HIGH Network	-	-	ApostropheCMS is an open-source Node.js content management system. Version 4.29.0 has a stored cross-site scripting vulnerability in the image widget functionality. A user with the Editor role can co… Update	CWE-79 CWE-116 Cross-site Scripting Improper Encoding or Escaping of Output	CVE-2026-45011	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

745	5.3	MEDIUM Local	-	-	A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in h… New	CWE-285 CWE-939 Improper Authorization Improper Authorization in Handler for Custom URL Scheme	CVE-2026-12189	2026-06-16 01:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

746	4.8	MEDIUM Adjacent	-	-	Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which caches a pointer to the next list nod… New	CWE-416 Use After Free	CVE-2026-10634	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

747	6.5	MEDIUM Network	-	-	Contributor Cross Site Scripting (XSS) in Elizaibots <= 1.0.2 versions. New	CWE-79 Cross-site Scripting	CVE-2025-15659	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

748	5.9	MEDIUM Network	-	-	Administrator Cross Site Scripting (XSS) in WP Emmet <= 0.3.4 versions. New	CWE-79 Cross-site Scripting	CVE-2025-15658	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

749	5.3	MEDIUM Network	axios	axios	Axios is a promise based HTTP client for the browser and Node.js. From 1.15.2 to before 1.16.0, nested objects created by utils.merge() (e.g., config.proxy) are still constructed as plain {} with Obj… Update	CWE-113 CWE-1321 HTTP Response Splitting Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2026-44489	2026-06-16 01:13	2026-06-12	Show	GitHub Exploit DB Packet Storm

750	7.5	HIGH Network	vllm	vllm	vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processi… Update	CWE-400 Uncontrolled Resource Consumption	CVE-2026-5497	2026-06-16 01:11	2026-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed