Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4481	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界条件の判定に関する脆弱性	CWE-193 境界条件の判定	CVE-2026-23256	2026-05-22 10:58	2026-03-18	Show	GitHub Exploit DB Packet Storm

4482	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界条件の判定に関する脆弱性	CWE-193 境界条件の判定	CVE-2026-23257	2026-05-22 10:58	2026-03-18	Show	GitHub Exploit DB Packet Storm

4483	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-23448	2026-05-22 10:58	2026-04-3	Show	GitHub Exploit DB Packet Storm

4484	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-23449	2026-05-22 10:58	2026-04-3	Show	GitHub Exploit DB Packet Storm

4485	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23450	2026-05-22 10:58	2026-04-3	Show	GitHub Exploit DB Packet Storm

4486	7.5	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-23451	2026-05-22 10:58	2026-04-3	Show	GitHub Exploit DB Packet Storm

4487	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23461	2026-05-22 10:58	2026-04-3	Show	GitHub Exploit DB Packet Storm

4488	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23462	2026-05-22 10:57	2026-04-3	Show	GitHub Exploit DB Packet Storm

4489	4.7	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-23463	2026-05-22 10:57	2026-04-3	Show	GitHub Exploit DB Packet Storm

4490	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-23464	2026-05-22 10:57	2026-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3851	6.5	MEDIUM Network	-	-	When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user m…	CWE-617 Reachable Assertion	CVE-2026-9746	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

3852	6.5	MEDIUM Network	-	-	This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces e…	CWE-617 Reachable Assertion	CVE-2026-9749	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

3853	6.5	MEDIUM Network	-	-	An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-wi…	CWE-476 NULL Pointer Dereference	CVE-2026-9752	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

3854	8.1	HIGH Network	-	-	The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApply…	CWE-1287 Improper Validation of Specified Type of Input	CVE-2026-9753	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

3855	6.5	MEDIUM Network	-	-	An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command	CWE-457 Use of Uninitialized Variable	CVE-2026-9754	2026-06-11 04:43	2026-06-10	Show	GitHub Exploit DB Packet Storm

3856	5.4	MEDIUM Network	microsoft	sharepoint_server	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.	CWE-79 Cross-site Scripting	CVE-2026-45479	2026-06-11 04:42	2026-06-10	Show	GitHub Exploit DB Packet Storm

3857	6.1	MEDIUM Network	-	-	Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in …	CWE-79 Cross-site Scripting	CVE-2026-32856	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

3858	5.4	MEDIUM Network	-	-	Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting vulnerability in index.php where the dir parameter value is reflected without HTML encoding inside the HT…	CWE-79 Cross-site Scripting	CVE-2026-25557	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

3859	6.1	MEDIUM Network	-	-	OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the …	CWE-79 Cross-site Scripting	CVE-2026-34416	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm

3860	6.1	MEDIUM Network	-	-	OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embeddi…	CWE-79 Cross-site Scripting	CVE-2026-25860	2026-06-11 04:41	2026-06-10	Show	GitHub Exploit DB Packet Storm