Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3291 9.1 緊急
Network 		Sick Field Analytics SickのField Analyticsにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2025-49196 2026-01-28 12:42 2025-06-12 Show GitHub Exploit DB Packet Storm
3292 7.5 重要
Network 		firefly media server SickのMedia Serverにおける弱いハッシュの使用に関する脆弱性 CWE-328
脆弱なハッシュの使用 		CVE-2025-49197 2026-01-28 12:42 2025-06-12 Show GitHub Exploit DB Packet Storm
3293 7.5 重要
Network 		firefly media server SickのMedia Serverにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2025-49198 2026-01-28 12:42 2025-06-12 Show GitHub Exploit DB Packet Storm
3294 9.8 緊急
Network 		Sick Field Analytics SickのField Analyticsにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2025-49199 2026-01-28 12:42 2025-06-12 Show GitHub Exploit DB Packet Storm
3295 7.5 重要
Network 		Sick Field Analytics SickのField Analyticsにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-49200 2026-01-28 12:42 2025-06-12 Show GitHub Exploit DB Packet Storm
3296 9.6 緊急
Network 		ジュニパーネットワークス Security Director ジュニパーネットワークスのSecurity Directorにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-52950 2026-01-28 12:41 2025-07-11 Show GitHub Exploit DB Packet Storm
3297 6.1 警告
Network 		ジュニパーネットワークス Juniper Paragon Automation ジュニパーネットワークスのJuniper Paragon Automationにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2025-52987 2026-01-28 12:41 2026-01-15 Show GitHub Exploit DB Packet Storm
3298 8.8 重要
Network 		Ruijie Networks M18 EW ファームウェア
RG-EW3000GX PRO Firmware 		Ruijie NetworksのM18 EW ファームウェア等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-56089 2026-01-28 12:41 2025-12-11 Show GitHub Exploit DB Packet Storm
3299 8.8 重要
Network 		Ruijie Networks X30 Pro ファームウェア
RG-EAP602 Firmware
rg-ew300 pro ファームウェア 		Ruijie NetworksのRG-EAP602 Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-56093 2026-01-28 12:41 2025-12-11 Show GitHub Exploit DB Packet Storm
3300 8.8 重要
Network 		Ruijie Networks RG-EAP602 Firmware
rg-ew1200g pro ファームウェア 		Ruijie NetworksのRG-EAP602 Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-56095 2026-01-28 12:41 2025-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVERY_REQUEST` is `True`. A remote attacker … New CWE-539
 Use of Persistent Cookies Containing Sensitive Information 		CVE-2026-35192 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
62 6.1 MEDIUM
Local 		- - A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit … New CWE-805
 Buffer Access with Incorrect Length Value 		CVE-2026-34002 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
63 6.1 MEDIUM
Local 		- - A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an at… New CWE-125
Out-of-bounds Read 		CVE-2026-34000 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
64 - - - Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Trans… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-32689 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
65 - - - The traceroute diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing aut… New - CVE-2026-31196 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
66 - - - The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing authentic… New - CVE-2026-31195 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
67 6.5 MEDIUM
Network 		- - Fiber is a web framework for Go. In github.com/gofiber/fiber/v3 versions through 3.1.0, the default key generator in the cache middleware uses only the request path and does not include the query str… New CWE-436
 Interpretation Conflict 		CVE-2026-30246 2026-05-6 01:16 2026-05-5 Show GitHub Exploit DB Packet Storm
68 5.4 MEDIUM
Network 		- - Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the email notification templates insert user-controlled device, geofence, and driver n… New CWE-79
Cross-site Scripting 		CVE-2026-27694 2026-05-6 01:16 2026-05-5 Show GitHub Exploit DB Packet Storm
69 9.8 CRITICAL
Network 		- - Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file… New CWE-122
Heap-based Buffer Overflow 		CVE-2025-70067 2026-05-6 01:16 2026-05-4 Show GitHub Exploit DB Packet Storm
70 8.1 HIGH
Network 		- - IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authen… New CWE-284
Improper Access Control 		CVE-2025-67796 2026-05-6 01:16 2026-05-5 Show GitHub Exploit DB Packet Storm