Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1511	7.2	重要 Network	SUN NET TECHNOLOGIES CO., LTD.	eHRD CPAS eHRD CTMS	SUN NET TECHNOLOGIES CO., LTD.のeHRD CPAS等の複数製品における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-7490	2026-05-14 10:23	2026-05-2	Show	GitHub Exploit DB Packet Storm

1512	6.3	警告 Network	Router-For.ME	CLI Proxy API	Router-For.MEのCLI Proxy APIにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-8081	2026-05-14 10:23	2026-05-7	Show	GitHub Exploit DB Packet Storm

1513	9.1	緊急 Network	LibreNMS	LibreNMS	LibreNMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-51092	2026-05-14 10:23	2026-05-8	Show	GitHub Exploit DB Packet Storm

1514	9.8	緊急 Network	The PHP Group	PHP	The PHP GroupのPHPにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-14179	2026-05-14 10:23	2026-05-10	Show	GitHub Exploit DB Packet Storm

1515	7.5	重要 Network	IBM	watsonx.data	IBMのwatsonx.dataにおける意図するエンドポイントとの通信チャネルの制限に関する脆弱性	CWE-923 意図するエンドポイントとの通信チャネルの不適切な制限	CVE-2025-36180	2026-05-14 10:23	2026-04-30	Show	GitHub Exploit DB Packet Storm

1516	5.5	警告 Local	IBM	watsonx.data	IBMのwatsonx.dataにおける認証情報の平文保存に関する脆弱性	CWE-256 平文でパスワードを保存	CVE-2025-36335	2026-05-14 10:23	2026-04-30	Show	GitHub Exploit DB Packet Storm

1517	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2025-46311	2026-05-14 10:23	2026-05-12	Show	GitHub Exploit DB Packet Storm

1518	4.7	警告 Network	ISPConfig	ISPConfig	ISPConfigにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-52206	2026-05-14 10:23	2026-05-5	Show	GitHub Exploit DB Packet Storm

1519	7.3	重要 Network	AstrBot	AstrBot	AstrBotにおけるハードコードされた暗号鍵の使用に関する脆弱性	CWE-321 ハードコードされた暗号鍵の使用	CVE-2025-55449	2026-05-14 10:23	2026-05-8	Show	GitHub Exploit DB Packet Storm

1520	7.2	重要 Network	Check MK	Check MK	Check MKにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2025-64998	2026-05-14 10:22	2026-03-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2371	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to limit the size of the request body on the start meeting API endpoint, which allows an authenticated attacker to cau…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-2325	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2372	3.1	LOW Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to red…	CWE-305 Authentication Bypass by Primary Weakness	CVE-2026-6334	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2373	4.3	MEDIUM Network	-	-	Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to have API-level checks on which groups the user can create issues or attach comments to which allows a user that is member of multip…	CWE-863 Incorrect Authorization	CVE-2026-6341	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2374	4.3	MEDIUM Network	-	-	Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to appropriately check for valid namespaces which allows plugin users to create subscriptions to groups that were not whitelisted via …	CWE-863 Incorrect Authorization	CVE-2026-6342	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2375	6.5	MEDIUM Network	-	-	Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or se…	CWE-862 Missing Authorization	CVE-2026-3117	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2376	6.5	MEDIUM Network	-	-	Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in the Mattermost Desktop App which allows a malicious server owner to repeated cra…	CWE-939 Improper Authorization in Handler for Custom URL Scheme	CVE-2026-3471	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2377	3.1	LOW Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permissio…	CWE-863 Incorrect Authorization	CVE-2026-4286	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2378	3.5	LOW Network	-	-	Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying application view in the Mattermost Desktop App which allows a malicious server …	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-4643	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2379	6.5	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1 fail to verify channel membership when processing AI-assisted message rewrites which allows an authenticated attacker to read the content of threads in private ch…	CWE-862 Missing Authorization	CVE-2026-5163	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

2380	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 11.4.x <= 11.4.3 fail to validate the X-Requested-With header on the burn-on-read reveal endpoint which allows an authenticated channel member to force the revea…	CWE-346 Origin Validation Error	CVE-2026-6339	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm