Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5121	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31704	2026-05-8 12:06	2026-05-1	Show	GitHub Exploit DB Packet Storm

5122	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31705	2026-05-8 12:06	2026-05-1	Show	GitHub Exploit DB Packet Storm

5123	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31706	2026-05-8 12:06	2026-05-1	Show	GitHub Exploit DB Packet Storm

5124	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31707	2026-05-8 12:06	2026-05-1	Show	GitHub Exploit DB Packet Storm

5125	8.1	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31708	2026-05-8 12:05	2026-05-1	Show	GitHub Exploit DB Packet Storm

5126	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31709	2026-05-8 12:05	2026-05-1	Show	GitHub Exploit DB Packet Storm

5127	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31710	2026-05-8 12:05	2026-05-1	Show	GitHub Exploit DB Packet Storm

5128	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31711	2026-05-8 12:05	2026-05-1	Show	GitHub Exploit DB Packet Storm

5129	8.3	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31712	2026-05-8 12:05	2026-05-1	Show	GitHub Exploit DB Packet Storm

5130	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31713	2026-05-8 12:05	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
411	4.3	MEDIUM Network	-	-	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Hash Elements: from n…	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-24618	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

412	3.5	LOW Network	-	-	A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of the file /Projects/Add_Projects of the component Projects Management Page. The m…	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-12130	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

413	3.5	LOW Network	-	-	A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/add_tod of the component Dashboard Interf…	CWE-79 CWE-94 Cross-site Scripting Code Injection	CVE-2026-12129	2026-06-13 06:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

414	5.5	MEDIUM Local	mongodb	mongodb	The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-9751	2026-06-13 05:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

415	7.5	HIGH Network	vmware	spring_security	An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates …	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40988	2026-06-13 05:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

416	5.4	MEDIUM Network	vmware	spring_security	An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 throug…	CWE-79 Cross-site Scripting	CVE-2026-41003	2026-06-13 05:30	2026-06-10	Show	GitHub Exploit DB Packet Storm

417	5.3	MEDIUM Network	vmware	spring_security	Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloa…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-41694	2026-06-13 05:28	2026-06-10	Show	GitHub Exploit DB Packet Storm

418	9.8	CRITICAL Network	qnap	qts	QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later	NVD-CWE-noinfo	CVE-2025-66276	2026-06-13 05:25	2026-06-10	Show	GitHub Exploit DB Packet Storm

419	6.5	MEDIUM Network	qnap	qts quts_hero	A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read…	CWE-22 Path Traversal	CVE-2026-24717	2026-06-13 05:21	2026-06-10	Show	GitHub Exploit DB Packet Storm

420	-		-	-	MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegations, and shadow attributes. Several controller actions accepted user-supplied fi…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-54361	2026-06-13 05:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed