Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
321 7.8 重要
Local
デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager
デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定
CVE-2025-32747 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
322 7.5 重要
Network
デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager
デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2025-32749 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
323 5.5 警告
Local
デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager
デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納
CVE-2025-32751 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
324 5.5 警告
Local
デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager
デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2025-46371 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
325 6.5 警告
Network
Splunk Splunk AI Toolkit SplunkのSplunk AI Toolkitにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-20238 2026-05-28 14:33 2026-05-20 Show GitHub Exploit DB Packet Storm
326 7.5 重要
Network
NVIDIA NVIDIA TensorRT NVIDIAのNVIDIA TensorRTにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-24188 2026-05-28 14:33 2026-05-20 Show GitHub Exploit DB Packet Storm
327 5.3 警告
Network
Dropbox Erlang SAML library Lexi Wilson (arekinath)等の複数ベンダの製品におけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2026-28809 2026-05-28 14:33 2026-03-23 Show GitHub Exploit DB Packet Storm
328 9.1 緊急
Network
Nexent Nexent Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2026-31215 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
329 9.1 緊急
Network
Nexent Nexent Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2026-31216 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
330 9.8 緊急
Network
Nebuly OptiMate NebulyのOptiMateにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-31217 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 7.3 HIGH
Network
- - A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of the file login_1.php. Executing a manipulation of the argument Username can lea… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10208 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1002 6.3 MEDIUM
Network
- - A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the component Appointment Handler. The mani… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-10209 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1003 6.3 MEDIUM
Network
- - A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/skills/skill_manager.py. The manipulation… New CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure
CVE-2026-10210 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1004 6.3 MEDIUM
Network
- - A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py. This manipulation causes i… New CWE-285
CWE-863
Improper Authorization
 Incorrect Authorization
CVE-2026-10211 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1005 6.3 MEDIUM
Network
- - A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astrbot/core/astr_main_agent.py. Such manipulation of the argument session_id leads… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-10212 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1006 5.4 MEDIUM
Network
- - A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /api/skills/delete of the component API Endpoint. Performing a manipulation of t… New CWE-22
Path Traversal
CVE-2026-10213 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1007 7.3 HIGH
Network
- - A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component Bash Tool. Executin… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-10214 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1008 4.3 MEDIUM
Network
- - A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.php of the component … New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-10215 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1009 3.7 LOW
Network
- - A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown function of the file server/src/routes/pairing.ts of the component claim Endpoint. The manipulatio… New CWE-307
CWE-799
mproper Restriction of Excessive Authentication Attempts
 Improper Control of Interaction Frequency
CVE-2026-10216 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm
1010 6.3 MEDIUM
Network
- - A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the file internal/http/tts_config.go of the component RoleAdmin Gateway. This manipul… New CWE-266
CWE-269
 Incorrect Privilege Assignment
 Improper Privilege Management
CVE-2026-10217 2026-06-2 00:15 2026-06-1 Show GitHub Exploit DB Packet Storm