Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
311 2.6 低
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-9248 2026-05-28 14:35 2026-05-22 Show GitHub Exploit DB Packet Storm
312 3.1 低
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける未検証のパスワード変更に関する脆弱性 CWE-620
未検証のパスワード変更 		CVE-2026-9249 2026-05-28 14:35 2026-05-22 Show GitHub Exploit DB Packet Storm
313 5.4 警告
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-9251 2026-05-28 14:35 2026-05-22 Show GitHub Exploit DB Packet Storm
314 9.8 緊急
Network 		LiteSpeed Technologies LiteSpeed cPanel Plugin
LiteSpeed WHM Plugin (previously cPanel/WHM Plugin) 		LiteSpeed TechnologiesのLiteSpeed cPanel Plugin等の複数製品における不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定 		CVE-2026-48172 2026-05-28 14:34 2026-05-21 Show GitHub Exploit DB Packet Storm
315 9.8 緊急
Network 		Apache Software Foundation Apache Fory Apache Software FoundationのApache Foryにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-48207 2026-05-28 14:34 2026-05-21 Show GitHub Exploit DB Packet Storm
316 9.8 緊急
Network 		FastNetMon FastNetMon Pavel OdintsovのFastNetMonにおける複数の脆弱性 CWE-122
CWE-193
CWE-787
CVE-2026-48689 2026-05-28 14:34 2026-05-26 Show GitHub Exploit DB Packet Storm
317 9.1 緊急
Network 		Honeywell International Inc. Control Network Module Firmware Honeywell International Inc.のControl Network Module Firmwareにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-5433 2026-05-28 14:33 2026-05-21 Show GitHub Exploit DB Packet Storm
318 8.2 重要
Network 		デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager 		デルのPowerFlex appliance Intelligent Catalog Software等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-26483 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
319 6.5 警告
Adjacent 		デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager 		デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2025-32745 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
320 5.5 警告
Local 		デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager 		デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2025-32746 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 7.3 HIGH
Network 		- - A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of the file login_1.php. Executing a manipulation of the argument Username can lea… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10208 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1002 6.3 MEDIUM
Network 		- - A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the component Appointment Handler. The mani… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-10209 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1003 6.3 MEDIUM
Network 		- - A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/skills/skill_manager.py. The manipulation… New CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure 		CVE-2026-10210 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1004 6.3 MEDIUM
Network 		- - A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py. This manipulation causes i… New CWE-285
CWE-863
Improper Authorization
 Incorrect Authorization 		CVE-2026-10211 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1005 6.3 MEDIUM
Network 		- - A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astrbot/core/astr_main_agent.py. Such manipulation of the argument session_id leads… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-10212 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1006 5.4 MEDIUM
Network 		- - A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /api/skills/delete of the component API Endpoint. Performing a manipulation of t… New CWE-22
Path Traversal 		CVE-2026-10213 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1007 7.3 HIGH
Network 		- - A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component Bash Tool. Executin… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-10214 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1008 4.3 MEDIUM
Network 		- - A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component … New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-10215 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1009 3.7 LOW
Network 		- - A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown function of the file server/src/routes/pairing.ts of the component claim Endpoint. The manipulatio… New CWE-307
CWE-799
mproper Restriction of Excessive Authentication Attempts
 Improper Control of Interaction Frequency 		CVE-2026-10216 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1010 6.3 MEDIUM
Network 		- - A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the file internal/http/tts_config.go of the component RoleAdmin Gateway. This manipul… New CWE-266
CWE-269
 Incorrect Privilege Assignment
 Improper Privilege Management 		CVE-2026-10217 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm