Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4341	4.7	警告 Local	GL.iNet	Comet (GL-RM1) Firmware	GL.iNetのComet (GL-RM1) Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2026-32290	2026-04-28 10:11	2026-03-17	Show	GitHub Exploit DB Packet Storm

4342	6.8	警告 Physics	GL.iNet	Comet (GL-RM1) Firmware	GL.iNetのComet (GL-RM1) Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-32291	2026-04-28 10:11	2026-03-17	Show	GitHub Exploit DB Packet Storm

4343	7.5	重要 Network	GL.iNet	Comet (GL-RM1) Firmware	GL.iNetのComet (GL-RM1) Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-32292	2026-04-28 10:11	2026-03-17	Show	GitHub Exploit DB Packet Storm

4344	3.7	低 Network	GL.iNet	Comet (GL-RM1) Firmware	GL.iNetのComet (GL-RM1) Firmwareにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-32293	2026-04-28 10:11	2026-03-17	Show	GitHub Exploit DB Packet Storm

4345	6.5	警告 Network	オラクル	PeopleSoft Enterprise FIN Contracts	オラクルのPeopleSoft Enterprise FIN Contractsにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-34300	2026-04-28 10:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

4346	3.7	低 Network	Smallstep	Step CA	SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-40097	2026-04-28 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

4347	8.2	重要 Network	Saltcorn	Saltcorn	Saltcornにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40163	2026-04-28 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

4348	6.1	警告 Network	AdonisJS	adonisjs/http-server AdonisJS Core	AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-40255	2026-04-28 10:11	2026-04-16	Show	GitHub Exploit DB Packet Storm

4349	9.3	緊急 Local	MinecAnton209	NovumOS	MinecAnton209のNovumOSにおける複数の脆弱性	CWE-20 CWE-269	CVE-2026-40317	2026-04-28 10:11	2026-04-18	Show	GitHub Exploit DB Packet Storm

4350	9	緊急 Local	MinecAnton209	NovumOS	MinecAnton209のNovumOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-40572	2026-04-28 10:10	2026-04-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1181	8.4	HIGH Local	-	-	A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity …	CWE-1287 Improper Validation of Specified Type of Input	CVE-2026-40851	2026-05-27 23:53	2026-05-27	Show	GitHub Exploit DB Packet Storm

1182	7.2	HIGH Network	-	-	A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it …	CWE-78 OS Command	CVE-2026-40852	2026-05-27 23:53	2026-05-27	Show	GitHub Exploit DB Packet Storm

1183	5.5	MEDIUM Local	-	-	A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access sensitive user data.	CWE-285 Improper Authorization	CVE-2025-43289	2026-05-27 23:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1184	5.5	MEDIUM Local	-	-	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2025-43290	2026-05-27 23:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1185	7.8	HIGH Local	-	-	A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.	CWE-269 Improper Privilege Management	CVE-2025-43306	2026-05-27 23:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1186	5.5	MEDIUM Local	-	-	A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.	CWE-284 Improper Access Control	CVE-2025-43451	2026-05-27 23:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1187	5.5	MEDIUM Local	-	-	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination.	CWE-125 Out-of-bounds Read	CVE-2025-46280	2026-05-27 23:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1188	7.0	HIGH Local	-	-	A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to gain root privileges.	CWE-362 Race Condition	CVE-2025-46284	2026-05-27 23:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1189	5.5	MEDIUM Local	-	-	A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.	CWE-284 Improper Access Control	CVE-2025-46307	2026-05-27 23:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

1190	7.1	HIGH Network	-	-	Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Woocommerce Envato Affiliates: from n…	CWE-862 Missing Authorization	CVE-2025-14361	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm