Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3511 4.9 警告
Network 		アルバネットワークス株式会社 ArubaOS アルバネットワークス株式会社のArubaOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-44874 2026-05-18 11:24 2026-05-12 Show GitHub Exploit DB Packet Storm
3512 9.1 緊急
Network 		OPNsense project OPNsense OPNsenseにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-45158 2026-05-18 11:24 2026-05-13 Show GitHub Exploit DB Packet Storm
3513 5.3 警告
Network 		Apache Software Foundation Apache Commons Configuration Apache Software FoundationのApache Commons Configurationにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-45205 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3514 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-4524 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3515 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-4527 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3516 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-6063 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3517 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6073 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3518 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6335 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3519 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-6883 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3520 9.8 緊急
Network 		libexpat project libexpat libexpat projectのlibexpatにおけるエントロピー不足に関する脆弱性 CWE-331
エントロピー不足 		CVE-2026-7210 2026-05-18 11:24 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3191 - - - Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint Mint allows attacker-controlled HTTP/2 servers to exhaust memory in a Mint client via PUSH_PROMISE flooding. In lib/… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-48862 2026-06-3 02:18 2026-06-3 Show GitHub Exploit DB Packet Storm
3192 - - - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint Mint allows attacker-controlled HTTP/1 servers to desynchronise response framing on share… CWE-444
HTTP Request Smuggling 		CVE-2026-49753 2026-06-3 02:18 2026-06-3 Show GitHub Exploit DB Packet Storm
3193 - - - Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint Mint allows attacker-controlled HTTP/2 servers to exhaust memory in a Mint client (HTTP/2 CONTINUATION flood). When … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-49754 2026-06-3 02:18 2026-06-3 Show GitHub Exploit DB Packet Storm
3194 9.1 CRITICAL
Network 		- - In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnReques… - CVE-2026-9098 2026-06-3 02:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3195 9.8 CRITICAL
Network 		- - Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active. The GetTokenExchangeToken() function in object/token_oauth.go validates the JWT signature and pa… - CVE-2026-9097 2026-06-3 02:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3196 7.5 HIGH
Network 		- - Casdoor versions 2.362.0 and earlier do not enforce SAML assertion time bounds. The gosaml2 library reports all time-validation results, including NotOnOrAfter and NotBefore, in the assertionInfo.War… - CVE-2026-9096 2026-06-3 02:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3197 9.8 CRITICAL
Network 		- - Casdoor versions 2.362.0 and earlier contain a vulnerability enabling cross-organization token exchange. The GetTokenExchangeToken function in object/token_oauth.go validates JWT signatures but does … - CVE-2026-9094 2026-06-3 02:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3198 9.8 CRITICAL
Network 		- - In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestriction element in SAML assertions. The buildSp function in object/saml_sp.go never… - CVE-2026-9093 2026-06-3 02:16 2026-05-29 Show GitHub Exploit DB Packet Storm
3199 5.9 MEDIUM
Network 		ibm websphere_application_server IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting … CWE-362
Race Condition 		CVE-2026-5516 2026-06-3 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
3200 5.5 MEDIUM
Local 		ibm app_connect_enterprise IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user. CWE-922
CWE-532
 Insecure Storage of Sensitive Information
 Inclusion of Sensitive Information in Log Files 		CVE-2026-5515 2026-06-3 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm