Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
891 4.3 警告
Network
Timo Sirainen
Open-Xchange
Dovecot Pro
Dovecot
Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-42006 2026-05-20 13:31 2026-05-12 Show GitHub Exploit DB Packet Storm
892 4.3 警告
Network
getkirby kirby getkirbyのkirbyにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-42051 2026-05-20 13:30 2026-05-9 Show GitHub Exploit DB Packet Storm
893 6.5 警告
Network
getkirby kirby getkirbyのkirbyにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-42069 2026-05-20 13:30 2026-05-9 Show GitHub Exploit DB Packet Storm
894 6.5 警告
Network
getkirby kirby getkirbyのkirbyにおける複数の脆弱性 CWE-862
CWE-863
CVE-2026-42137 2026-05-20 13:30 2026-05-9 Show GitHub Exploit DB Packet Storm
895 7.8 重要
Local
Nullsoft Nullsoft Scriptable Install System NullsoftのNullsoft Scriptable Install Systemにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-42171 2026-05-20 13:30 2026-04-24 Show GitHub Exploit DB Packet Storm
896 4.3 警告
Network
getkirby kirby getkirbyのkirbyにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-42174 2026-05-20 13:30 2026-05-9 Show GitHub Exploit DB Packet Storm
897 7.5 重要
Network
OpenBao OpenBao OpenBaoにおける保存または転送前の重要な情報の削除に関する脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除
CVE-2026-42186 2026-05-20 13:30 2026-05-14 Show GitHub Exploit DB Packet Storm
898 7.5 重要
Network
Ruby-lang.org Net::IMAP Ruby-lang.orgのNet::IMAPにおけるアルゴリズムの複雑さに関する脆弱性 CWE-407
アルゴリズムの複雑性
CVE-2026-42245 2026-05-20 13:30 2026-05-9 Show GitHub Exploit DB Packet Storm
899 7.4 重要
Network
Ruby-lang.org Net::IMAP Ruby-lang.orgのNet::IMAPにおける複数の脆弱性 CWE-392
CWE-393
CWE-636
CWE-754
CWE-841
CVE-2026-42246 2026-05-20 13:30 2026-05-9 Show GitHub Exploit DB Packet Storm
900 9.8 緊急
Network
ollama ollama Ollamaにおけるダウンロードしたコードの完全性検証不備に関する脆弱性 CWE-494
ダウンロードしたコードの完全性検証不備
CVE-2026-42248 2026-05-20 13:30 2026-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2391 7.8 HIGH
Local
trendmicro apex_one A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the… CWE-59
Link Following
CVE-2025-71212 2026-05-23 00:08 2026-05-21 Show GitHub Exploit DB Packet Storm
2392 7.8 HIGH
Local
trendmicro apex_one An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili… CWE-346
 Origin Validation Error
CVE-2025-71213 2026-05-23 00:05 2026-05-21 Show GitHub Exploit DB Packet Storm
2393 7.5 HIGH
Network
honeywell control_network_module_firmware Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially… CWE-538
 File and Directory Information Exposure
CVE-2026-5434 2026-05-22 23:38 2026-05-21 Show GitHub Exploit DB Packet Storm
2394 9.1 CRITICAL
Network
honeywell control_network_module_firmware Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Rem… CWE-77
Command Injection
CVE-2026-5433 2026-05-22 23:38 2026-05-21 Show GitHub Exploit DB Packet Storm
2395 8.1 HIGH
Network
nvidia dgx_os NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cr… CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-24218 2026-05-22 23:35 2026-05-21 Show GitHub Exploit DB Packet Storm
2396 7.8 HIGH
Local
trendmicro apex_one An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different… CWE-346
 Origin Validation Error
CVE-2026-34930 2026-05-22 22:39 2026-05-21 Show GitHub Exploit DB Packet Storm
2397 7.8 HIGH
Local
trendmicro apex_one An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different… CWE-346
 Origin Validation Error
CVE-2026-34929 2026-05-22 22:38 2026-05-21 Show GitHub Exploit DB Packet Storm
2398 7.8 HIGH
Local
trendmicro apex_one An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different… CWE-346
 Origin Validation Error
CVE-2026-34928 2026-05-22 22:37 2026-05-21 Show GitHub Exploit DB Packet Storm
2399 7.8 HIGH
Local
trendmicro apex_one An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to … CWE-346
 Origin Validation Error
CVE-2026-34927 2026-05-22 22:31 2026-05-21 Show GitHub Exploit DB Packet Storm
2400 6.7 MEDIUM
Local
trendmicro apex_one A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents… CWE-23
 Relative Path Traversal
CVE-2026-34926 2026-05-22 21:47 2026-05-21 Show GitHub Exploit DB Packet Storm