Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4411	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-1660	2026-04-27 11:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

4412	4.8	警告 Network	pega	pega platform	pegaのpega platformにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-1711	2026-04-27 11:26	2026-04-15	Show	GitHub Exploit DB Packet Storm

4413	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-23314	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

4414	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-23315	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

4415	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23316	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

4416	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-23317	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

4417	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-23318	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

4418	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23319	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

4419	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-23321	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

4420	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23322	2026-04-27 11:26	2026-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1291	7.5	HIGH Network	-	-	An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server.	CWE-749 Exposed Dangerous Method or Function	CVE-2025-14713	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1292	8.6	HIGH Network	-	-	A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.	CWE-89 SQL Injection	CVE-2025-30028	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1293	6.1	MEDIUM Local	-	-	An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content during installation.	CWE-346 Origin Validation Error	CVE-2025-66592	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1294	6.1	MEDIUM Local	-	-	An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content during installation.	CWE-346 Origin Validation Error	CVE-2025-66593	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1295	6.2	MEDIUM Local	-	-	A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local attackers to obtain sensitive informatio…	CWE-598 Information Exposure Through Query Strings in GET Request	CVE-2026-2237	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1296	8.0	HIGH Adjacent	-	-	A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-3012	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1297	4.2	MEDIUM Network	-	-	A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote at…	CWE-1288 Improper Validation of Consistency within Input	CVE-2026-9689	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1298	7.1	HIGH Network	-	-	A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem wri…	CWE-284 Improper Access Control	CVE-2026-1933	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1299	6.8	MEDIUM Network	-	-	A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerability by sending an oversized subject_token JSON Web Token (JWT) to the TokenEndpoint. When the token …	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-9704	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm

1300	6.8	MEDIUM Network	-	-	PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an…	CWE-89 SQL Injection	CVE-2026-9617	2026-05-27 23:54	2026-05-27	Show	GitHub Exploit DB Packet Storm