Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2931	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71300	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

2932	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71301	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

2933	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71302	2026-05-18 12:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

2934	6.7	警告 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows リッチテキストエディットの特権昇格の脆弱性	CWE-415 二重解放	CVE-2026-21530	2026-05-18 12:19	2026-05-12	Show	GitHub Exploit DB Packet Storm

2935	6.5	警告 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28847	2026-05-18 12:19	2026-05-11	Show	GitHub Exploit DB Packet Storm

2936	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28873	2026-05-18 12:19	2026-05-11	Show	GitHub Exploit DB Packet Storm

2937	6.5	警告 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28902	2026-05-18 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

2938	6.5	警告 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28903	2026-05-18 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

2939	8.1	重要 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品における複数の脆弱性	CWE-116 CWE-20	CVE-2026-28907	2026-05-18 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

2940	5.5	警告 Local		-	アップルのmacOSにおける複数の脆弱性	CWE-358 CWE-693	CVE-2026-28914	2026-05-18 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3291	7.3	HIGH Network	-	-	An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java component	CWE-502 Deserialization of Untrusted Data	CVE-2026-37579	2026-06-2 06:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

3292	6.5	MEDIUM Network	streamlink	streamlink	Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries an…	CWE-22 Path Traversal	CVE-2026-44353	2026-06-2 05:14	2026-05-28	Show	GitHub Exploit DB Packet Storm

3293	5.5	MEDIUM Local	wireshark	wireshark	ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service	CWE-476 NULL Pointer Dereference	CVE-2026-9759	2026-06-2 04:26	2026-05-28	Show	GitHub Exploit DB Packet Storm

3294	7.3	HIGH Network	-	-	Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. The header injection rule was ineffective at blocking header injections in the r…	CWE-113 CWE-790 HTTP Response Splitting	CVE-2026-9658	2026-06-2 04:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

3295	9.1	CRITICAL Network	-	-	Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover. The getExistUserByBindingRule function matches users by email without…	-	CVE-2026-9092	2026-06-2 04:16	2026-05-29	Show	GitHub Exploit DB Packet Storm

3296	4.3	MEDIUM Network	-	-	FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reported previously, the same missing mailbox m…	CWE-285 Improper Authorization	CVE-2026-48810	2026-06-2 04:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

3297	9.0	CRITICAL Network	-	-	Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the application.updateTraefikConfig tRPC endpoint allows admin/owner users …	CWE-78 OS Command	CVE-2026-45630	2026-06-2 04:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

3298	7.2	HIGH Network	waterfall-security	wf-500_firmware	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version…	CWE-78 OS Command	CVE-2025-41265	2026-06-2 03:58	2026-05-29	Show	GitHub Exploit DB Packet Storm

3299	7.2	HIGH Network	waterfall-security	wf-500_firmware	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version…	CWE-78 OS Command	CVE-2025-41266	2026-06-2 03:57	2026-05-29	Show	GitHub Exploit DB Packet Storm

3300	7.2	HIGH Network	waterfall-security	wf-500_firmware	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version…	CWE-78 OS Command	CVE-2025-41267	2026-06-2 03:57	2026-05-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed