Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4061 5.3 警告
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-284
CWE-863
CVE-2026-40304 2026-04-27 11:27 2026-04-17 Show GitHub Exploit DB Packet Storm
4062 8.8 重要
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40502 2026-04-27 11:27 2026-04-16 Show GitHub Exploit DB Packet Storm
4063 6.5 警告
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40503 2026-04-27 11:27 2026-04-16 Show GitHub Exploit DB Packet Storm
4064 8.8 重要
Network 		FreePBX API Module FreePBXのAPI ModuleにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40520 2026-04-27 11:26 2026-04-21 Show GitHub Exploit DB Packet Storm
4065 6.1 警告
Network 		Yusuke Inuzuka (yuin) goldmark Yusuke Inuzuka (yuin)のgoldmarkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-5160 2026-04-27 11:26 2026-04-15 Show GitHub Exploit DB Packet Storm
4066 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-0186 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4067 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-3922 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4068 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-6016 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4069 7.5 重要
Network 		Nitro Software Inc. Nitro PDF Pro Nitro Software Inc.のNitro PDF ProにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-66769 2026-04-27 11:26 2026-04-13 Show GitHub Exploit DB Packet Storm
4070 7.5 重要
Network 		Nitro Software Inc. Nitro PDF Pro Nitro Software Inc.のNitro PDF ProにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-69624 2026-04-27 11:26 2026-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1411 5.5 MEDIUM
Local 		- - in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak CWE-281
 Improper Preservation of Permissions 		CVE-2026-25850 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
1412 8.8 HIGH
Network 		- - in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. CWE-787
 Out-of-bounds Write 		CVE-2026-27648 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
1413 5.5 MEDIUM
Local 		- - in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak. CWE-364
 Signal Handler Race Condition 		CVE-2026-27766 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
1414 3.3 LOW
Local 		- - in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. CWE-190
 Integer Overflow or Wraparound 		CVE-2026-27781 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
1415 6.5 MEDIUM
Local 		- - in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution. CWE-416
 Use After Free 		CVE-2026-28733 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
1416 3.3 LOW
Local 		- - in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. CWE-20
 Improper Input Validation  		CVE-2026-28751 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
1417 3.3 LOW
Local 		- - in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. CWE-364
 Signal Handler Race Condition 		CVE-2026-33565 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
1418 9.8 CRITICAL
Network 		- - Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary … CWE-94
Code Injection 		CVE-2026-8838 2026-05-19 23:24 2026-05-19 Show GitHub Exploit DB Packet Storm
1419 7.3 HIGH
Network 		- - Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the set_add method were not checked for newlines, colons or pipes. Metrics generated from untrusted sour… CWE-93
CRLF Injection 		CVE-2026-8788 2026-05-19 23:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1420 9.8 CRITICAL
Network 		radare radare2 radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbi… CWE-416
 Use After Free 		CVE-2026-8696 2026-05-19 23:16 2026-05-16 Show GitHub Exploit DB Packet Storm