Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4291	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35074	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4292	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-35153	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4293	8.8	重要 Network	Project Jupyter	Jupyter Server	Project JupyterのJupyter Serverにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35397	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4294	9.6	緊急 Network	マイクロソフト	Azure Cloud Shell	Azure Cloud Shell Spoofing Vulnerability	CWE-77 コマンドインジェクション	CVE-2026-35428	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4295	10	緊急 Network	マイクロソフト	Azure AI Foundry	Azure AI Foundry の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35435	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4296	9.8	緊急 Network	coredns.io	CoreDNS	The CoreDNS AuthorsのCoreDNSにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-35579	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4297	9.8	緊急 Network	Kestra	Kestra	KestraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-38428	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4298	7.2	重要 Network	Gotenberg, Inc.	Gotenberg	TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-39383	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4299	8.8	重要 Network	Apache Software Foundation	Apache NiFi	Apache Software FoundationのApache NiFiにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-39816	2026-05-11 11:10	2026-05-8	Show	GitHub Exploit DB Packet Storm

4300	8.2	重要 Network	Quarkus	Quarkus	Quarkusにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-39852	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2811	6.3	MEDIUM Network	-	-	A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI mo…	CWE-79 Cross-site Scripting	CVE-2026-39107	2026-06-5 01:28	2026-06-4	Show	GitHub Exploit DB Packet Storm

2812	9.8	CRITICAL Network	-	-	CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.	CWE-113 HTTP Response Splitting	CVE-2026-38967	2026-06-5 01:26	2026-06-3	Show	GitHub Exploit DB Packet Storm

2813	9.8	CRITICAL Network	-	-	An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.	CWE-78 OS Command	CVE-2026-36576	2026-06-5 01:26	2026-06-4	Show	GitHub Exploit DB Packet Storm

2814	6.1	MEDIUM Network	-	-	Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS.	CWE-79 Cross-site Scripting	CVE-2026-33553	2026-06-5 01:25	2026-06-3	Show	GitHub Exploit DB Packet Storm

2815	5.4	MEDIUM Network	-	-	LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG pa…	CWE-436 Interpretation Conflict	CVE-2026-40930	2026-06-5 01:23	2026-06-5	Show	GitHub Exploit DB Packet Storm

2816	9.6	CRITICAL Network	-	-	An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HT…	CWE-78 OS Command	CVE-2026-35906	2026-06-5 01:23	2026-06-5	Show	GitHub Exploit DB Packet Storm

2817	8.8	HIGH Network	-	-	Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mo…	CWE-284 CWE-862 Improper Access Control Missing Authorization	CVE-2026-5228	2026-06-5 01:23	2026-06-5	Show	GitHub Exploit DB Packet Storm

2818	9.9	CRITICAL Network	-	-	OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.	CWE-863 Incorrect Authorization	CVE-2026-41283	2026-06-5 01:21	2026-06-4	Show	GitHub Exploit DB Packet Storm

2819	-		-	-	A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplied fields in UsersController::edit(). When processing edit requests, the applica…	CWE-269 Improper Privilege Management	CVE-2026-10868	2026-06-5 01:20	2026-06-5	Show	GitHub Exploit DB Packet Storm

2820	8.8	HIGH Network	-	-	Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUpdate` as a state-changing administrator endpoint, but the route does not enforc…	CWE-352 Origin Validation Error	CVE-2026-43985	2026-06-5 01:20	2026-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed