Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4581 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-6771 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4582 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-6772 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4583 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-6773 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4584 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-6774 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4585 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6775 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4586 7.8 重要
Local 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6776 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4587 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-20
CWE-352
CWE-400
CVE-2026-6777 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4588 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-476
CWE-824
CVE-2026-6778 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4589 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-119
CWE-20
CWE-79
CVE-2026-6779 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4590 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6780 2026-04-24 11:38 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 4.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3. New CWE-862
 Missing Authorization 		CVE-2026-24545 2026-05-26 06:16 2026-05-26 Show GitHub Exploit DB Packet Storm
332 6.3 MEDIUM
Network 		- - A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. Impacted is the function GroovyClassLoader.parseClass of the component Message Template Handler. Such manipulation of the argument De… New CWE-791
CWE-1336
 Incomplete Filtering of Special Elements
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-9498 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
333 6.3 MEDIUM
Network 		- - A flaw has been found in changmingxie tcc-transaction up to 2.1.0. This issue affects the function Fastjson.parseObject of the component Fastjson AutoType REST API. This manipulation causes deseriali… New CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2026-9497 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
334 4.3 MEDIUM
Network 		- - A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be exe… New CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization 		CVE-2026-9486 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
335 3.5 LOW
Network 		- - A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument … New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-9485 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
336 6.3 MEDIUM
Network 		- - A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClassroom of the file class… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-9484 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
337 4.4 MEDIUM
Network 		- - In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection on shared mailboxes. New CWE-79
Cross-site Scripting 		CVE-2026-48849 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
338 7.2 HIGH
Network 		- - Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element… New CWE-79
Cross-site Scripting 		CVE-2026-48848 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
339 3.7 LOW
Network 		- - Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass. New CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2026-48847 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm
340 6.5 MEDIUM
Network 		- - In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information di… New CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2026-48846 2026-05-26 05:16 2026-05-26 Show GitHub Exploit DB Packet Storm