Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1551	9.8	緊急 Network	Fleet Device Management	fleet	Fleet Device ManagementのfleetにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26191	2026-05-20 13:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

1552	8.6	重要 Network	lfprojects	mlflow	lfprojectsのmlflowにおける根本の脆弱性による認証回避の脆弱性	CWE-305 根本の脆弱性による認証回避	CVE-2026-2652	2026-05-20 13:21	2026-05-15	Show	GitHub Exploit DB Packet Storm

1553	9.1	緊急 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品における余分なパラメータの不適切な処理に関する脆弱性	CWE-235 余分なパラメータの不適切な処理	CVE-2026-27851	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

1554	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28759	2026-05-20 13:21	2026-05-18	Show	GitHub Exploit DB Packet Storm

1555	5.5	警告 Local	マイクロソフト	Microsoft Teams	Microsoft Teams のなりすましの脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-32185	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

1556	7.2	重要 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33518	2026-05-20 13:21	2026-04-21	Show	GitHub Exploit DB Packet Storm

1557	9.8	緊急 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33519	2026-05-20 13:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

1558	5.3	警告 Adjacent	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるリソースの挿入に関する脆弱性	CWE-99 リソースの挿入	CVE-2026-33603	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

1559	6.1	警告 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33862	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

1560	7.5	重要 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-33893	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1	8.8	HIGH Network	-	-	Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document - the diagram filename … New	CWE-78 OS Command	CVE-2026-49492	2026-06-6 03:59	2026-06-6	Show	GitHub Exploit DB Packet Storm

2	8.8	HIGH Network	-	-	Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block content as code via vm.runInNewContext(), allowing arbitrary code execution. A… New	CWE-94 Code Injection	CVE-2026-49493	2026-06-6 03:59	2026-06-6	Show	GitHub Exploit DB Packet Storm

3	8.8	HIGH Network	-	-	Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval(), allowing arbitrary JavaScript execution. The flaw affects every render path - th… New	CWE-95 Eval Injection	CVE-2026-50733	2026-06-6 03:59	2026-06-6	Show	GitHub Exploit DB Packet Storm

4	4.3	MEDIUM Network	strawberry	strawberry_graphql	Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled GraphiQL template wrote values from the GraphiQL headers editor into the browser U… New	CWE-200 CWE-201 Information Exposure Insertion of Sensitive Information Into Sent Data	CVE-2026-45739	2026-06-6 03:43	2026-06-5	Show	GitHub Exploit DB Packet Storm

5	4.3	MEDIUM Network	synology	hyper_backup	An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated use… New	CWE-22 Path Traversal	CVE-2024-47273	2026-06-6 03:32	2026-06-3	Show	GitHub Exploit DB Packet Storm

6	4.1	MEDIUM Network	synology	hyper_backup	An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote authenti… New	CWE-22 Path Traversal	CVE-2024-47263	2026-06-6 03:31	2026-06-3	Show	GitHub Exploit DB Packet Storm

7	5.9	MEDIUM Network	synology	note_station_client	A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential. New	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2023-52951	2026-06-6 03:20	2026-06-3	Show	GitHub Exploit DB Packet Storm

8	7.8	HIGH Local	synology	hyper_backup_explorer	An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute arbitrary code via u… New	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2022-49042	2026-06-6 03:19	2026-06-3	Show	GitHub Exploit DB Packet Storm

9	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New	-	CVE-2026-6209	2026-06-6 03:17	2026-06-6	Show	GitHub Exploit DB Packet Storm

10	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New	-	CVE-2026-6208	2026-06-6 03:17	2026-06-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed