Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3851	8.8	重要 Network	D-Link Systems, Inc.	DIR-513 ファームウェア	D-Link CorporationのDIR-513 ファームウェアにおける複数の脆弱性	CWE-119 CWE-120	CVE-2026-6014	2026-05-1 10:42	2026-04-10	Show	GitHub Exploit DB Packet Storm

3852	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	AC9 ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のAC9 ファームウェアにおける複数の脆弱性	CWE-119 CWE-121	CVE-2026-6015	2026-05-1 10:42	2026-04-10	Show	GitHub Exploit DB Packet Storm

3853	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	AC9 ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のAC9 ファームウェアにおける複数の脆弱性	CWE-119 CWE-121	CVE-2026-6016	2026-05-1 10:42	2026-04-10	Show	GitHub Exploit DB Packet Storm

3854	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	i6 ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のi6 ファームウェアにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6024	2026-05-1 10:42	2026-04-10	Show	GitHub Exploit DB Packet Storm

3855	8.8	重要 Network	MetaGPT	MetaGPT	MetaGPTにおける複数の脆弱性	CWE-352 CWE-862	CVE-2026-6109	2026-05-1 10:42	2026-04-12	Show	GitHub Exploit DB Packet Storm

3856	9.8	緊急 Network	MetaGPT	MetaGPT	MetaGPTにおける複数の脆弱性	CWE-74 CWE-94	CVE-2026-6110	2026-05-1 10:42	2026-04-12	Show	GitHub Exploit DB Packet Storm

3857	6.5	警告 Network	MetaGPT	MetaGPT	MetaGPTにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-6111	2026-05-1 10:42	2026-04-12	Show	GitHub Exploit DB Packet Storm

3858	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	F451 Firmware	Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性	CWE-119 CWE-121	CVE-2026-6120	2026-05-1 10:42	2026-04-12	Show	GitHub Exploit DB Packet Storm

3859	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	F451 Firmware	Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性	CWE-119 CWE-121	CVE-2026-6121	2026-05-1 10:42	2026-04-12	Show	GitHub Exploit DB Packet Storm

3860	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	F451 Firmware	Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性	CWE-119 CWE-121	CVE-2026-6122	2026-05-1 10:42	2026-04-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1831	-		-	-	MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU-accelerated brute f…	CWE-328 Use of Weak Hash	CVE-2026-45413	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1832	7.4	HIGH Network	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who can MITM the TLS connection between the client and the IDP (within the TI netwo…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-45575	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1833	6.5	MEDIUM Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic he…	CWE-306 Missing Authentication for Critical Function	CVE-2026-47672	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1834	8.1	HIGH Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45…	CWE-295 Improper Certificate Validation	CVE-2026-44900	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1835	8.1	HIGH Adjacent	-	-	epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor can present any TLS c…	CWE-295 Improper Certificate Validation	CVE-2026-45574	2026-05-28 04:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

1836	-		-	-	Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job", ...) handler in 'El…	CWE-862 Missing Authorization	CVE-2026-48592	2026-05-28 04:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

1837	-		-	-	Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to sched…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-48593	2026-05-28 04:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

1838	5.9	MEDIUM Network	putty	putty	PuTTY 0.72 before 0.84 has a double free in RSA KEX.	CWE-415 Double Free	CVE-2026-48850	2026-05-28 04:14	2026-05-26	Show	GitHub Exploit DB Packet Storm

1839	3.1	LOW Network	putty	putty	PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-48851	2026-05-28 04:12	2026-05-26	Show	GitHub Exploit DB Packet Storm

1840	3.7	LOW Network	putty	putty	PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.	CWE-617 Reachable Assertion	CVE-2026-48852	2026-05-28 04:11	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed