Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4301 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-1660 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4302 4.8 警告
Network 		pega pega platform pegaのpega platformにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-1711 2026-04-27 11:26 2026-04-15 Show GitHub Exploit DB Packet Storm
4303 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-Other
その他 		CVE-2026-23314 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
4304 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-23315 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
4305 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-23316 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
4306 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-23317 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
4307 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-23318 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
4308 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-23319 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
4309 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-Other
その他 		CVE-2026-23321 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
4310 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-23322 2026-04-27 11:26 2026-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 3.7 LOW
Network 		- - A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/… New CWE-759
CWE-760
 Use of a One-Way Hash without a Salt
 Use of a One-Way Hash with a Predictable Salt 		CVE-2026-9370 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
1232 5.6 MEDIUM
Network 		- - A security vulnerability has been detected in ItzCrazyKns Vane up to 1.12.1. Affected by this issue is some unknown functionality of the file route.ts of the component API. The manipulation leads to … New CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-9371 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
1233 7.3 HIGH
Network 		- - A flaw has been found in ItzCrazyKns Vane up to 1.12.1. This vulnerability affects unknown code of the file src/app/api/providers/route.ts of the component Model Provider API. This manipulation of th… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-9372 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
1234 6.3 MEDIUM
Network 		- - A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the file /common/upload of the component Common Upload Endpoint. Performing a mani… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-9374 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
1235 6.3 MEDIUM
Network 		- - A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Execut… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-9376 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
1236 2.4 LOW
Network 		- - A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the argument productName … New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-9377 2026-05-27 04:54 2026-05-24 Show GitHub Exploit DB Packet Storm
1237 4.3 MEDIUM
Network 		- - A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This affects an unknown part of the file /user of the component User Management Handler. This manipu… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-9409 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
1238 4.3 MEDIUM
Network 		- - A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workf… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-9410 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
1239 4.3 MEDIUM
Network 		- - A weakness has been identified in code-projects Employee Management System 1.0. This affects an unknown function of the file /eloginwel.php. This manipulation of the argument ID causes cross site scr… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-9415 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm
1240 4.3 MEDIUM
Network 		- - A security vulnerability has been detected in code-projects Employee Management System 1.0. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument ID leads to … New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-9416 2026-05-27 04:54 2026-05-25 Show GitHub Exploit DB Packet Storm