Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
691	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-48905	2026-05-28 14:39	2026-05-26	Show	GitHub Exploit DB Packet Storm

692	6.3	警告 Local	Inkscape	Inkscape	InkscapeにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-4980	2026-05-28 14:39	2026-03-27	Show	GitHub Exploit DB Packet Storm

693	4.3	警告 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-5146	2026-05-28 14:39	2026-05-12	Show	GitHub Exploit DB Packet Storm

694	4.3	警告 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-5171	2026-05-28 14:39	2026-05-22	Show	GitHub Exploit DB Packet Storm

695	7.5	重要 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-5308	2026-05-28 14:39	2026-05-22	Show	GitHub Exploit DB Packet Storm

696	8.8	重要 Adjacent	TP-LINK Technologies	Archer C7 ファームウェア	TP-LINK TechnologiesのArcher C7 ファームウェアにおける暗号強度に関する脆弱性	CWE-326 不適切な暗号強度	CVE-2026-5363	2026-05-28 14:39	2026-04-16	Show	GitHub Exploit DB Packet Storm

697	7.5	重要 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-5740	2026-05-28 14:39	2026-05-22	Show	GitHub Exploit DB Packet Storm

698	6.5	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-5755	2026-05-28 14:39	2026-05-22	Show	GitHub Exploit DB Packet Storm

699	5.3	警告 Network	Concrete CMS	Concrete CMS	Concrete CMSにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-6826	2026-05-28 14:39	2026-05-21	Show	GitHub Exploit DB Packet Storm

700	7.1	重要 Network	Devolutions	Devolutions Server	DevolutionsのDevolutions Serverにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-7325	2026-05-28 14:39	2026-05-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2241	-		-	-	MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU-accelerated brute f…	CWE-328 Use of Weak Hash	CVE-2026-45413	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

2242	7.4	HIGH Network	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who can MITM the TLS connection between the client and the IDP (within the TI netwo…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-45575	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

2243	6.5	MEDIUM Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic he…	CWE-306 Missing Authentication for Critical Function	CVE-2026-47672	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

2244	8.1	HIGH Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45…	CWE-295 Improper Certificate Validation	CVE-2026-44900	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

2245	8.1	HIGH Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor can present any TLS c…	CWE-295 Improper Certificate Validation	CVE-2026-45574	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

2246	-		-	-	Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job", ...) handler in 'El…	CWE-862 Missing Authorization	CVE-2026-48592	2026-05-28 04:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

2247	-		-	-	Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to sched…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-48593	2026-05-28 04:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

2248	5.9	MEDIUM Network	putty	putty	PuTTY 0.72 before 0.84 has a double free in RSA KEX.	CWE-415 Double Free	CVE-2026-48850	2026-05-28 04:14	2026-05-26	Show	GitHub Exploit DB Packet Storm

2249	3.1	LOW Network	putty	putty	PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-48851	2026-05-28 04:12	2026-05-26	Show	GitHub Exploit DB Packet Storm

2250	3.7	LOW Network	putty	putty	PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.	CWE-617 Reachable Assertion	CVE-2026-48852	2026-05-28 04:11	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed