Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5181 9.1 緊急
Network 		axios project axios axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) 		CVE-2026-42264 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
5182 5.7 警告
Network 		Kimai project kimai Kimai projectのKimaiにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2026-42267 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
5183 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-42499 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
5184 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-42501 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
5185 9.1 緊急
Network 		Grav CMS grav Grav CMSのgravにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-42608 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
5186 5.4 警告
Network 		Open edX openedx Open edXのopenedxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42857 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
5187 9.9 緊急
Network 		Open edX openedx Open edXのopenedxにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42858 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
5188 7.5 重要
Network 		マイクロソフト Microsoft Outlook Microsoft Outlook for iOS の改ざんの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-42893 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
5189 7.5 重要
Network 		マイクロソフト .NET ASP.NET Core のサービス拒否の脆弱性 CWE-835
無限ループ 		CVE-2026-42899 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
5190 8.6 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-43139 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1361 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() issue with local kptr… - CVE-2026-53032 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1362 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() arena_alloc_pages() accepts a plain int node_id and forwards it through the entire a… - CVE-2026-53031 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1363 - - - In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers() The xfer structure allocated by renesas_i3c_alloc_xfer() was nev… - CVE-2026-53030 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1364 - - - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent uninitialized lcn caused by zero len syzbot reported a uninit-value in ntfs_iomap_begin [1]. Since runs was no… - CVE-2026-53029 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1365 - - - In the Linux kernel, the following vulnerability has been resolved: usb: typec: Fix error pointer dereference The variable tps->partner is checked for an error pointer and then if it is, it sends a… - CVE-2026-53028 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1366 - - - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() When a compressed or sparse attribute has its clusters fr… - CVE-2026-53027 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1367 - - - In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg In nfsd4_add_rdaccess_to_wrdeleg, if fp->fi_fds[O_RDONLY]… - CVE-2026-53026 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1368 - - - In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundle is disconnected but its char… - CVE-2026-53025 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1369 - - - In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free if write is called after disconnect If a user writes to the chardev after disconnect has been ca… - CVE-2026-53024 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm
1370 - - - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: terminate the cached volume label after UTF-8 conversion ntfs_fill_super() loads the on-disk volume label with utf16s_t… - CVE-2026-53023 2026-06-25 02:17 2026-06-25 Show GitHub Exploit DB Packet Storm