Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4161 8.1 重要
Adjacent
wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備
CVE-2026-5479 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
4162 5.3 警告
Network
wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備
CVE-2026-5504 2026-04-30 10:58 2026-04-9 Show GitHub Exploit DB Packet Storm
4163 4 警告
Local
wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-5507 2026-04-30 10:58 2026-04-9 Show GitHub Exploit DB Packet Storm
4164 4.3 警告
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
送信データへの重要な情報の挿入
CVE-2026-5512 2026-04-30 10:58 2026-04-21 Show GitHub Exploit DB Packet Storm
4165 5.5 警告
Local
レッドハット
libarchive
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux
Red Hat Hardened Images
libarchive
libarchive等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-5745 2026-04-30 10:58 2026-04-7 Show GitHub Exploit DB Packet Storm
4166 5.3 警告
Network
wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード
CVE-2026-5772 2026-04-30 10:57 2026-04-9 Show GitHub Exploit DB Packet Storm
4167 6.5 警告
Network
wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2026-5778 2026-04-30 10:57 2026-04-9 Show GitHub Exploit DB Packet Storm
4168 9.6 緊急
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-5845 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
4169 8.9 重要
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-5921 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
4170 7.8 重要
Local
レッドハット
gimp
Red Hat Enterprise Linux
gimp
gimp等の複数ベンダの製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2026-6384 2026-04-30 10:57 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1281 4.1 MEDIUM
Network
- - When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Comp… New CWE-89
SQL Injection
CVE-2026-48136 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1282 5.3 MEDIUM
Network
- - A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation. New CWE-122
Heap-based Buffer Overflow
CVE-2026-48135 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1283 7.5 HIGH
Network
- - When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway. New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-48133 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1284 8.1 HIGH
Network
- - The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, r… New CWE-122
Heap-based Buffer Overflow
CVE-2026-48131 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1285 7.1 HIGH
Network
- - TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via Client-Side Script Execution and API Authorization Bypass") is incomplete. Whil… New CWE-284
CWE-522
CWE-639
Improper Access Control
 Insufficiently Protected Credentials
 Authorization Bypass Through User-Controlled Key
CVE-2026-39968 2026-05-26 23:16 2026-05-23 Show GitHub Exploit DB Packet Storm
1286 7.5 HIGH
Network
- - An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by an unauthenticated network-based attack… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-11482 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1287 6.5 MEDIUM
Network
splunk ai_toolkit In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through `srchFilter` configurations… Update CWE-863
 Incorrect Authorization
CVE-2026-20238 2026-05-26 21:45 2026-05-21 Show GitHub Exploit DB Packet Storm
1288 3.8 LOW
Network
- - This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out ma… New CWE-1240
 Use of a Cryptographic Primitive with a Risky Implementation
CVE-2026-44410 2026-05-26 19:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1289 7.8 HIGH
Local
- - MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability New CWE-122
Heap-based Buffer Overflow
CVE-2026-25713 2026-05-26 19:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1290 7.8 HIGH
Local
- - MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability New CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-25104 2026-05-26 19:16 2026-05-26 Show GitHub Exploit DB Packet Storm