Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3051 6.1 警告
Network 		Carnegie Mellon University (Project Cyrus) cveClient Carnegie Mellon University (Project Cyrus)のcveClientにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35466 2026-06-5 10:51 2026-04-2 Show GitHub Exploit DB Packet Storm
3052 7.5 重要
Network 		Carnegie Mellon University (Project Cyrus) cveClient Carnegie Mellon University (Project Cyrus)のcveClientにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-35467 2026-06-5 10:51 2026-04-2 Show GitHub Exploit DB Packet Storm
3053 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-37226 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
3054 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-37228 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
3055 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-37229 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
3056 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-37230 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
3057 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-37231 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
3058 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-37233 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
3059 7.5 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-37235 2026-06-5 10:51 2026-06-1 Show GitHub Exploit DB Packet Storm
3060 4.9 警告
Network 		MacGregor Interschalt VDR G4e Firmware MacGregorのInterschalt VDR G4e Firmwareにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2026-40425 2026-06-5 10:51 2026-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
631 7.5 HIGH
Network 		- - pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized text from git, URL, tarball, file, and other opaque locators. Approval for one s… New CWE-346
CWE-693
CWE-829
 Origin Validation Error
 Protection Mechanism Failure
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-55487 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
632 - - - ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, any authenticated user with builder role (free t… New CWE-94
Code Injection 		CVE-2026-55413 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
633 8.3 HIGH
Network 		- - ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source compo… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-55412 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
634 6.8 MEDIUM
Adjacent 		- - ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.1780-lts, the authenticated endpoint POST /api/data-sourc… New CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2026-55411 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
635 6.5 MEDIUM
Network 		- - pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm and pacquet expanded ${ENV_VAR} placeholders from repository-controlled .npmrc and pnpm-workspace.yaml into registry request destinations … New CWE-200
CWE-201
CWE-522
Information Exposure
 Insertion of Sensitive Information Into Sent Data
 Insufficiently Protected Credentials 		CVE-2026-55180 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
636 5.9 MEDIUM
Network 		- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the POST /api/auth/2fa/backup/regenerate endpoint regenerates all 2FA backup codes without requiring an… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-54040 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
637 6.5 MEDIUM
Network 		- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and forkUserLimiter rate limiters to POST /api/convos/for… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-54037 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
638 7.7 HIGH
Network 		- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, LibreChat allows users to configure custom OpenAI-compatible API endpoints by setting a baseURL. This U… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-54033 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
639 5.4 MEDIUM
Network 		- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, there is a vulnerability in LibreChat's markdown artifact preview pipeline. The marked library v15.0.12… New CWE-79
Cross-site Scripting 		CVE-2026-54025 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm
640 6.5 MEDIUM
Network 		- - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2024-11171 (commit bb58a2d0) added limits: { fileSize } to createMulterInstance() in th… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-54024 2026-06-26 04:16 2026-06-26 Show GitHub Exploit DB Packet Storm