Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
601 7.5 重要
Network 		Netty Netty Nettyにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-44248 2026-05-20 13:28 2026-05-13 Show GitHub Exploit DB Packet Storm
602 6.5 警告
Network 		Shellhub Shellhub Shellhubにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44424 2026-05-20 13:28 2026-05-13 Show GitHub Exploit DB Packet Storm
603 5.4 警告
Network 		Shellhub Shellhub Shellhubにおける複数の脆弱性 CWE-1333
CWE-20
CWE-943
CVE-2026-44425 2026-05-20 13:28 2026-05-13 Show GitHub Exploit DB Packet Storm
604 5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44550 2026-05-20 13:28 2026-05-15 Show GitHub Exploit DB Packet Storm
605 9.1 緊急
Network 		openwebui open webui openwebuiのopen webuiにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-44551 2026-05-20 13:28 2026-05-15 Show GitHub Exploit DB Packet Storm
606 8.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-44552 2026-05-20 13:28 2026-05-15 Show GitHub Exploit DB Packet Storm
607 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-44553 2026-05-20 13:28 2026-05-15 Show GitHub Exploit DB Packet Storm
608 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44554 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
609 7.6 重要
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44555 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
610 7.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-44556 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1771 6.5 MEDIUM
Network 		shellhub shellhub ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/devices/:uid returns the full device object whenever the caller is authenticated, without verifying that the device belongs to the cal… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-44424 2026-05-18 22:35 2026-05-14 Show GitHub Exploit DB Packet Storm
1772 5.4 MEDIUM
Network 		shellhub shellhub ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in the the name field of each filter property in the base64-encoded filter query p… CWE-20
CWE-943
CWE-1333
 Improper Input Validation 
 Improper Neutralization of Special Elements in Data Query Logic
 Inefficient Regular Expression Complexity 		CVE-2026-44425 2026-05-18 22:34 2026-05-14 Show GitHub Exploit DB Packet Storm
1773 4.3 MEDIUM
Network 		microsoft edge User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-35429 2026-05-18 22:34 2026-05-13 Show GitHub Exploit DB Packet Storm
1774 5.5 MEDIUM
Local 		microsoft teams Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. CWE-552
 Files or Directories Accessible to External Parties 		CVE-2026-32185 2026-05-18 22:33 2026-05-13 Show GitHub Exploit DB Packet Storm
1775 4.3 MEDIUM
Network 		microsoft edge_chromium User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-40416 2026-05-18 22:26 2026-05-13 Show GitHub Exploit DB Packet Storm
1776 7.5 HIGH
Network 		- - A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS pa… CWE-475
 Undefined Behavior for Input to API 		CVE-2026-42009 2026-05-18 22:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1777 9.8 CRITICAL
Network 		netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a request carries both… CWE-444
HTTP Request Smuggling 		CVE-2026-42581 2026-05-18 22:14 2026-05-14 Show GitHub Exploit DB Packet Storm
1778 9.8 CRITICAL
Network 		espressif arduino-esp32 arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer multipart form parser in arduino-esp32 allocates a … CWE-121
Stack-based Buffer Overflow 		CVE-2026-42854 2026-05-18 22:09 2026-05-13 Show GitHub Exploit DB Packet Storm
1779 8.8 HIGH
Network 		mongodb mongodb An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issu… CWE-787
 Out-of-bounds Write 		CVE-2026-8053 2026-05-18 22:06 2026-05-13 Show GitHub Exploit DB Packet Storm
1780 7.5 HIGH
Network 		thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handle… CWE-362
Race Condition 		CVE-2026-42594 2026-05-18 22:02 2026-05-15 Show GitHub Exploit DB Packet Storm