Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1871	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-1402	2026-05-29 11:18	2026-05-27	Show	GitHub Exploit DB Packet Storm

1872	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-23292	2026-05-29 11:18	2026-03-25	Show	GitHub Exploit DB Packet Storm

1873	9.8	緊急 Network	マイクロソフト	Microsoft Power Pages	Microsoft Power Pages Remote Code Execution Vulnerability	CWE-77 コマンドインジェクション	CVE-2026-23652	2026-05-29 11:18	2026-05-22	Show	GitHub Exploit DB Packet Storm

1874	7.1	重要 Network	lfprojects	mlflow	lfprojectsのmlflowにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-2393	2026-05-29 11:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

1875	4.7	警告 Local	NVIDIA	gpu display driver	NVIDIAのgpu display driverにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-24199	2026-05-29 11:18	2026-05-26	Show	GitHub Exploit DB Packet Storm

1876	9.8	緊急 Network	NVIDIA	Isaac Launchable	NVIDIAのIsaac Launchableにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-24212	2026-05-29 11:18	2026-05-26	Show	GitHub Exploit DB Packet Storm

1877	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-25900	2026-05-29 11:18	2026-05-26	Show	GitHub Exploit DB Packet Storm

1878	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-25901	2026-05-29 11:18	2026-05-26	Show	GitHub Exploit DB Packet Storm

1879	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-2601	2026-05-29 11:18	2026-05-27	Show	GitHub Exploit DB Packet Storm

1880	7.5	重要 Network	lfprojects	mlflow	lfprojectsのmlflowにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-2614	2026-05-29 11:17	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2691	3.6	LOW Local	-	-	A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. …	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2026-10812	2026-06-5 01:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

2692	3.6	LOW Local	-	-	A flaw has been found in LMCache up to 0.4.6. This affects the function hex_hash_to_int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can…	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2026-10813	2026-06-5 01:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

2693	6.3	MEDIUM Network	-	-	A vulnerability was found in LakshayD02 Hostel-Management-System-PHP up to f87e67c283bab6f718faf2fec6ae39a13bd7036b. This issue affects some unknown processing of the file hostel/index.php of the com…	CWE-862 CWE-863 Missing Authorization Incorrect Authorization	CVE-2026-10815	2026-06-5 01:32	2026-06-5	Show	GitHub Exploit DB Packet Storm

2694	5.9	MEDIUM Network	-	-	FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser. In src/simple_packet_parser_ng.cpp, after validating that the packet contains at least sizeof(ipv4…	CWE-125 Out-of-bounds Read	CVE-2026-48682	2026-06-5 01:28	2026-06-3	Show	GitHub Exploit DB Packet Storm

2695	7.5	HIGH Network	-	-	An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.	CWE-190 Integer Overflow or Wraparound	CVE-2026-37462	2026-06-5 01:28	2026-06-4	Show	GitHub Exploit DB Packet Storm

2696	6.3	MEDIUM Network	-	-	A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI mo…	CWE-79 Cross-site Scripting	CVE-2026-39107	2026-06-5 01:28	2026-06-4	Show	GitHub Exploit DB Packet Storm

2697	9.8	CRITICAL Network	-	-	CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.	CWE-113 HTTP Response Splitting	CVE-2026-38967	2026-06-5 01:26	2026-06-3	Show	GitHub Exploit DB Packet Storm

2698	9.8	CRITICAL Network	-	-	An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.	CWE-78 OS Command	CVE-2026-36576	2026-06-5 01:26	2026-06-4	Show	GitHub Exploit DB Packet Storm

2699	6.1	MEDIUM Network	-	-	Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS.	CWE-79 Cross-site Scripting	CVE-2026-33553	2026-06-5 01:25	2026-06-3	Show	GitHub Exploit DB Packet Storm

2700	5.4	MEDIUM Network	-	-	LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG pa…	CWE-436 Interpretation Conflict	CVE-2026-40930	2026-06-5 01:23	2026-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed