Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201231 7.5 重要
Network 		OpenSSL Project
SUSE		 - OpenSSL の crypto/x509/x509_vfy.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7052 2016-12-5 16:57 2016-09-26 Show GitHub Exploit DB Packet Storm
201232 9.8 緊急
Network 		OpenSSL Project - OpenSSL の statem/statem.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-6309 2016-12-5 16:57 2016-09-26 Show GitHub Exploit DB Packet Storm
201233 5.9 警告
Network 		Apache Software Foundation - Apache HTTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1546 2016-12-5 16:57 2016-04-11 Show GitHub Exploit DB Packet Storm
201234 6.5 警告 Debian
Canonical
Apache Software Foundation		 - Apache Tomcat の org/apache/naming/factory/ResourceLinkFactory.java の setGlobalContext メソッドにおける SecurityManager の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0763 2016-12-5 16:57 2016-01-5 Show GitHub Exploit DB Packet Storm
201235 7.8 重要
Local 		BMC Software - BMC Patrol における root 権限へ昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9638 2016-12-5 14:09 2016-12-2 Show GitHub Exploit DB Packet Storm
201236 7.5 重要
Network 		b2evolution - b2evolution の "パスワード喪失" 機能における任意のユーザパスワードをリセットされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-9479 2016-12-5 12:10 2016-10-17 Show GitHub Exploit DB Packet Storm
201237 8.1 重要
Network 		IBM - IBM Security AppScan における任意のファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2016-3033 2016-12-5 11:08 2016-08-8 Show GitHub Exploit DB Packet Storm
201238 9.1 緊急
Network 		libdwarf project - libdwarf における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-9480 2016-12-2 16:50 2016-11-14 Show GitHub Exploit DB Packet Storm
201239 8.1 重要
Network 		IBM - IBM FileNet Workplace における任意のファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2016-3055 2016-12-2 16:14 2016-07-22 Show GitHub Exploit DB Packet Storm
201240 6.8 警告
Network 		IBM - IBM FileNet Workplace におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2016-3047 2016-12-2 16:14 2016-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 3.6 LOW
Local 		lfprojects mlflow A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipu… New CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash 		CVE-2026-10803 2026-06-5 03:24 2026-06-4 Show GitHub Exploit DB Packet Storm
32 7.5 HIGH
Network 		- - Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no … New - CVE-2026-8881 2026-06-5 03:16 2026-06-4 Show GitHub Exploit DB Packet Storm
33 7.4 HIGH
Local 		- - In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution New CWE-93
CRLF Injection 		CVE-2026-50292 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
34 2.2 LOW
Network 		- - In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("n… New CWE-863
 Incorrect Authorization 		CVE-2026-50266 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
35 9.1 CRITICAL
Network 		- - Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on Java/JVM platforms allows a remote attacker to bypass class registration, TypeChec… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-50076 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
36 6.5 MEDIUM
Network 		- - Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This… New CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-49940 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
37 - - - The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. When deriving native memory addresses… New CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-48040 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
38 7.4 HIGH
Network 		- - An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When ssl… New CWE-297
 Improper Validation of Certificate with Host Mismatch 		CVE-2026-44393 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
39 9.9 CRITICAL
Network 		- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public `/image/<hash>` route that resolves attacker-controlled entries from `image_has… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43986 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
40 8.9 HIGH
Network 		- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `log_js_errors` to any authenticated user, including guest users when guest access is en… New CWE-79
Cross-site Scripting 		CVE-2026-43984 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm