Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5401	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43348	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5402	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-43349	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5403	7.6	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43350	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5404	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43351	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5405	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43352	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5406	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-43353	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5407	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2026-43354	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5408	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-43355	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5409	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-43356	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

5410	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43357	2026-05-18 11:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1321	8.8	HIGH Network	-	-	Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing mal…	CWE-121 Stack-based Buffer Overflow	CVE-2026-56766	2026-06-26 04:50	2026-06-26	Show	GitHub Exploit DB Packet Storm

1322	8.5	HIGH Network	-	-	Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make arb…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-56769	2026-06-26 04:50	2026-06-26	Show	GitHub Exploit DB Packet Storm

1323	4.3	MEDIUM Network	-	-	NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenticated users to read private notification feeds by supplying arbitrary user_id values to the GET /social/inter…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-56772	2026-06-26 04:50	2026-06-26	Show	GitHub Exploit DB Packet Storm

1324	6.4	MEDIUM Network	-	-	MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows authenticated users to make arbitrary server requests by supplying unvalidat…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-56779	2026-06-26 04:50	2026-06-26	Show	GitHub Exploit DB Packet Storm

1325	8.8	HIGH Network	-	-	Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link tok…	CWE-862 Missing Authorization	CVE-2026-56768	2026-06-26 04:48	2026-06-26	Show	GitHub Exploit DB Packet Storm

1326	7.5	HIGH Network	-	-	libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote attackers can crash s…	CWE-129 Improper Validation of Array Index	CVE-2026-56770	2026-06-26 04:48	2026-06-26	Show	GitHub Exploit DB Packet Storm

1327	6.5	MEDIUM Local	-	-	An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a pr…	CWE-125 Out-of-bounds Read	CVE-2026-9539	2026-06-26 04:26	2026-06-24	Show	GitHub Exploit DB Packet Storm

1328	8.2	HIGH Network	-	-	FlatPress contains a stored cross-site scripting vulnerability in comment and contact forms where name, URL, and email fields are rendered without proper output encoding in Smarty templates. Attacker…	CWE-79 Cross-site Scripting	CVE-2026-56785	2026-06-26 04:25	2026-06-24	Show	GitHub Exploit DB Packet Storm

1329	6.5	MEDIUM Network	-	-	Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set…	CWE-241 Improper Handling of Unexpected Data Type	CVE-2026-47110	2026-06-26 04:25	2026-06-25	Show	GitHub Exploit DB Packet Storm

1330	7.5	HIGH Network	-	-	Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences …	CWE-22 Path Traversal	CVE-2026-56122	2026-06-26 04:25	2026-06-25	Show	GitHub Exploit DB Packet Storm