Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2481 4.3 警告
Network
Weblate Weblate Weblateにおける観測可能な不一致に関する脆弱性 CWE-203
セキュリティ関連の処理に対するレスポンスの違いに起因する情報漏えい
CVE-2026-44263 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2482 7.5 重要
Network
ZTE ZXCLOUD iRAI ZTEのZXCLOUD iRAIにおける書式文字列に関する脆弱性 CWE-134
CWE-noinfo
CVE-2026-44407 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2483 2.7
Network
Tanium Tanium Threat Response TaniumのTanium Threat Responseにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-6392 2026-05-13 10:21 2026-04-22 Show GitHub Exploit DB Packet Storm
2484 6.5 警告
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-6736 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2485 7.5 重要
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-7541 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2486 9.8 緊急
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおける複数の脆弱性 CWE-436
CWE-918
CVE-2026-8034 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2487 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-8063 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2488 5.4 警告
Network
MISP MISP MISPにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-8080 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2489 9.8 緊急
Network
Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird
Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
CWE-noinfo
CVE-2026-8091 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
2490 8.1 重要
Network
Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird
Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-8092 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2591 3.7 LOW
Network
- - A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulat… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2026-9396 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2592 8.1 HIGH
Network
- - A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown functionality of the component OTA Update Installation Handler. This manipulati… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-9397 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2593 3.1 LOW
Adjacent
- - A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to authentication bypass b… CWE-287
CWE-294
Improper Authentication
Authentication Bypass by Capture-replay 
CVE-2026-9398 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2594 8.8 HIGH
Network
- - A vulnerability has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromPPTPUserSetting of the file /goform/PPTPUserSetting. Such manipulation of the argument delno leads to stack-b… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9428 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2595 8.8 HIGH
Network
- - A vulnerability was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. Performing a manipulation of the argument delno… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9429 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2596 8.8 HIGH
Network
- - A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Executing a manipulation of the argument dip… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9430 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2597 8.8 HIGH
Network
- - A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument opttype leads to stack-based b… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9431 2026-05-27 04:57 2026-05-25 Show GitHub Exploit DB Packet Storm
2598 5.3 MEDIUM
Network
- - A vulnerability was determined in calcom cal.diy up to 4.9.4. Affected by this issue is the function getServerSideProps of the file apps/web/modules/bookings/views/bookings-single-view.getServerSideP… CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2026-9349 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
2599 3.5 LOW
Network
- - A vulnerability was found in vBulletin 6.x. This impacts an unknown function of the component Login. Performing a manipulation results in cross site scripting. It is possible to initiate the attack r… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9357 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
2600 4.3 MEDIUM
Network
- - A vulnerability was determined in postcss up to 7.1.1. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead t… CWE-404
CWE-674
 Improper Resource Shutdown or Release
 Uncontrolled Recursion
CVE-2026-9358 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm