Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4271 8.1 重要
Adjacent 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2026-5479 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
4272 5.3 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2026-5504 2026-04-30 10:58 2026-04-9 Show GitHub Exploit DB Packet Storm
4273 4 警告
Local 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-5507 2026-04-30 10:58 2026-04-9 Show GitHub Exploit DB Packet Storm
4274 4.3 警告
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
送信データへの重要な情報の挿入 		CVE-2026-5512 2026-04-30 10:58 2026-04-21 Show GitHub Exploit DB Packet Storm
4275 5.5 警告
Local 		レッドハット
libarchive		 Red Hat OpenShift Container Platform
Red Hat Enterprise Linux
Red Hat Hardened Images
libarchive 		libarchive等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-5745 2026-04-30 10:58 2026-04-7 Show GitHub Exploit DB Packet Storm
4276 5.3 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-5772 2026-04-30 10:57 2026-04-9 Show GitHub Exploit DB Packet Storm
4277 6.5 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-5778 2026-04-30 10:57 2026-04-9 Show GitHub Exploit DB Packet Storm
4278 9.6 緊急
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-5845 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
4279 8.9 重要
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-5921 2026-04-30 10:57 2026-04-21 Show GitHub Exploit DB Packet Storm
4280 7.8 重要
Local 		レッドハット
gimp		 Red Hat Enterprise Linux
gimp 		gimp等の複数ベンダの製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-6384 2026-04-30 10:57 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 7.5 HIGH
Network 		- - An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. CWE-749
 Exposed Dangerous Method or Function 		CVE-2025-14713 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1292 8.6 HIGH
Network 		- - A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. CWE-89
SQL Injection 		CVE-2025-30028 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1293 6.1 MEDIUM
Local 		- - An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error 		CVE-2025-66592 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1294 6.1 MEDIUM
Local 		- - An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error 		CVE-2025-66593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1295 6.2 MEDIUM
Local 		- - A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local attackers to obtain sensitive informatio… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2026-2237 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1296 8.0 HIGH
Adjacent 		- - A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-3012 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1297 4.2 MEDIUM
Network 		- - A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote at… CWE-1288
 Improper Validation of Consistency within Input 		CVE-2026-9689 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1298 7.1 HIGH
Network 		- - A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem wri… CWE-284
Improper Access Control 		CVE-2026-1933 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1299 6.8 MEDIUM
Network 		- - A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerability by sending an oversized subject_token JSON Web Token (JWT) to the TokenEndpoint. When the token … CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-9704 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1300 6.8 MEDIUM
Network 		- - PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an… CWE-89
SQL Injection 		CVE-2026-9617 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm