Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
311 2.6 低
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-9248 2026-05-28 14:35 2026-05-22 Show GitHub Exploit DB Packet Storm
312 3.1 低
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける未検証のパスワード変更に関する脆弱性 CWE-620
未検証のパスワード変更 		CVE-2026-9249 2026-05-28 14:35 2026-05-22 Show GitHub Exploit DB Packet Storm
313 5.4 警告
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-9251 2026-05-28 14:35 2026-05-22 Show GitHub Exploit DB Packet Storm
314 9.8 緊急
Network 		LiteSpeed Technologies LiteSpeed cPanel Plugin
LiteSpeed WHM Plugin (previously cPanel/WHM Plugin) 		LiteSpeed TechnologiesのLiteSpeed cPanel Plugin等の複数製品における不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定 		CVE-2026-48172 2026-05-28 14:34 2026-05-21 Show GitHub Exploit DB Packet Storm
315 9.8 緊急
Network 		Apache Software Foundation Apache Fory Apache Software FoundationのApache Foryにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-48207 2026-05-28 14:34 2026-05-21 Show GitHub Exploit DB Packet Storm
316 9.8 緊急
Network 		FastNetMon FastNetMon Pavel OdintsovのFastNetMonにおける複数の脆弱性 CWE-122
CWE-193
CWE-787
CVE-2026-48689 2026-05-28 14:34 2026-05-26 Show GitHub Exploit DB Packet Storm
317 9.1 緊急
Network 		Honeywell International Inc. Control Network Module Firmware Honeywell International Inc.のControl Network Module Firmwareにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-5433 2026-05-28 14:33 2026-05-21 Show GitHub Exploit DB Packet Storm
318 8.2 重要
Network 		デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager 		デルのPowerFlex appliance Intelligent Catalog Software等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-26483 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
319 6.5 警告
Adjacent 		デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager 		デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2025-32745 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
320 5.5 警告
Local 		デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager 		デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2025-32746 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
951 5.5 MEDIUM
Local 		- - SpSoft AppLock (com.sp.protector.free) 7.9.40 for Android allows a local attacker with physical access to bypass fingerprint or PIN authentication. Although the app integrates Android's biometric mec… CWE-285
CWE-287
Improper Authorization
Improper Authentication 		CVE-2025-68712 2026-05-29 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
952 6.6 MEDIUM
Network 		jenkins active_directory Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-48919 2026-05-29 02:14 2026-05-28 Show GitHub Exploit DB Packet Storm
953 8.8 HIGH
Network 		jenkins email_extension Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by setting the `data-inline` attribute, without restrictions on the image URLs that c… CWE-73
 External Control of File Name or Path 		CVE-2026-48920 2026-05-29 02:14 2026-05-28 Show GitHub Exploit DB Packet Storm
954 7.5 HIGH
Network 		jenkins pipeline\ Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a… CWE-59
Link Following 		CVE-2026-48921 2026-05-29 02:06 2026-05-28 Show GitHub Exploit DB Packet Storm
955 6.5 MEDIUM
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions han… CWE-476
 NULL Pointer Dereference 		CVE-2026-44323 2026-05-29 02:02 2026-05-28 Show GitHub Exploit DB Packet Storm
956 7.5 HIGH
Network 		jenkins credentials_binding Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to w… CWE-20
 Improper Input Validation  		CVE-2026-48922 2026-05-29 02:01 2026-05-28 Show GitHub Exploit DB Packet Storm
957 4.3 MEDIUM
Network 		jenkins appspider Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-spe… CWE-269
 Improper Privilege Management 		CVE-2026-48923 2026-05-29 02:01 2026-05-28 Show GitHub Exploit DB Packet Storm
958 4.3 MEDIUM
Network 		jenkins bitbucket_oauth Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. CWE-601
Open Redirect 		CVE-2026-48924 2026-05-29 01:59 2026-05-28 Show GitHub Exploit DB Packet Storm
959 4.3 MEDIUM
Network 		kostyasha github_integration A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request. CWE-352
 Origin Validation Error 		CVE-2026-48925 2026-05-29 01:57 2026-05-28 Show GitHub Exploit DB Packet Storm
960 6.5 MEDIUM
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions han… CWE-704
CWE-754
 Incorrect Type Conversion or Cast
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-44324 2026-05-29 01:52 2026-05-28 Show GitHub Exploit DB Packet Storm