Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3151 6.6 警告
Local 		インテル Intel QuickAssist Technology インテルのIntel QuickAssist Technologyにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-20905 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3152 5.5 警告
Local 		インテル Intel QuickAssist Technology インテルのIntel QuickAssist TechnologyにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-20914 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3153 7.2 重要
Network 		strapi strapi strapiにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-22599 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3154 6.5 警告
Network 		strapi strapi strapiにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-22706 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3155 5.4 警告
Network 		strapi strapi strapiにおける複数の脆弱性 CWE-434
CWE-693
CVE-2026-22707 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3156 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-23824 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3157 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-23825 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3158 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23826 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3159 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-23827 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3160 7.5 重要
Network 		Fleet Device Management fleet Fleet Device Managementのfleetにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-23998 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3271 8.6 HIGH
Network 		- - Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/batch.go) allows any p… CWE-409
CWE-770
 Improper Handling of Highly Compressed Data (Data Amplification)
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44697 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3272 9.8 CRITICAL
Network 		- - SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0,… CWE-290
CWE-306
CWE-346
CWE-807
 Authentication Bypass by Spoofing
Missing Authentication for Critical Function
 Origin Validation Error
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-44649 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3273 8.8 HIGH
Network 		freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel … CWE-122
Heap-based Buffer Overflow 		CVE-2026-44420 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3274 4.3 MEDIUM
Network 		- - A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. This man… CWE-119
CWE-787
Incorrect Access of Indexable Resource ('Range Error') 
 Out-of-bounds Write 		CVE-2026-10114 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3275 8.3 HIGH
Network 		- - agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying malicious metadata keys and values t… CWE-89
SQL Injection 		CVE-2026-10105 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3276 7.5 HIGH
Network 		- - A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be la… CWE-400
CWE-404
 Uncontrolled Resource Consumption
 Improper Resource Shutdown or Release 		CVE-2026-10069 2026-06-2 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3277 9.9 CRITICAL
Network 		- - RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated u… CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-45312 2026-06-2 11:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3278 - - - RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, improper validation in the PUT /rustfs/admin/v3/import-iam endpoint allows a user with ImportIAMAction to create se… CWE-269
CWE-284
 Improper Privilege Management
Improper Access Control 		CVE-2026-45043 2026-06-2 11:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3279 8.8 HIGH
Network 		tauri tauri Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri's is_local_url() function causes it to incorrectly classify remote URLs as trusted loca… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42184 2026-06-2 09:52 2026-05-28 Show GitHub Exploit DB Packet Storm
3280 8.8 HIGH
Network 		dalibo anonymizer PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an… CWE-89
SQL Injection 		CVE-2026-9617 2026-06-2 09:40 2026-05-27 Show GitHub Exploit DB Packet Storm