Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4591 5.6 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35363 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
4592 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35364 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
4593 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-35367 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
4594 7.8 重要
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2026-35368 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
4595 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-35377 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
4596 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける指定された機能の不適切な提供に関する脆弱性 CWE-684
指定された機能の不適切な提供 		CVE-2026-35381 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
4597 5.4 警告
Network 		Papra Papra Papraにおける複数の脆弱性 CWE-79
CWE-80
CVE-2026-35460 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
4598 4.3 警告
Network 		Papra Papra Papraにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35461 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
4599 4.3 警告
Network 		Papra Papra Papraにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-35462 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
4600 8.1 重要
Network 		RedwoodSDK RedwoodSDK RedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-39371 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
931 5.9 MEDIUM
Network 		- - SharpCompress is a fully managed C# library to deal with many compression types and formats. In 0.47.4 and earlier, a path traversal vulnerability in IArchive.WriteToDirectory() allows a malicious ar… CWE-22
Path Traversal 		CVE-2026-44788 2026-05-30 01:25 2026-05-27 Show GitHub Exploit DB Packet Storm
932 6.5 MEDIUM
Network 		- - Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries an… CWE-22
Path Traversal 		CVE-2026-44353 2026-05-30 01:25 2026-05-28 Show GitHub Exploit DB Packet Storm
933 6.1 MEDIUM
Network 		- - Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHybridGrant authoriza… CWE-601
CWE-863
Open Redirect
 Incorrect Authorization 		CVE-2026-44681 2026-05-30 01:25 2026-05-28 Show GitHub Exploit DB Packet Storm
934 7.5 HIGH
Network 		- - MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule, psLayer, 1); for any <Rule> carrying <ElseFil… CWE-129
CWE-476
 Improper Validation of Array Index
 NULL Pointer Dereference 		CVE-2026-45104 2026-05-30 01:25 2026-05-28 Show GitHub Exploit DB Packet Storm
935 - - - CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as t… CWE-250
CWE-271
CWE-426
 Execution with Unnecessary Privileges
 Privilege Dropping / Lowering Errors
 Untrusted Search Path 		CVE-2026-44477 2026-05-30 01:25 2026-05-29 Show GitHub Exploit DB Packet Storm
936 9.6 CRITICAL
Network 		- - MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect … CWE-79
Cross-site Scripting 		CVE-2026-45323 2026-05-30 01:25 2026-05-29 Show GitHub Exploit DB Packet Storm
937 8.3 HIGH
Network 		- - Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.4.1 for iOS and 2026.4.4 for Android, he Home Assistant Companion apps for Android and … CWE-94
CWE-346
CWE-749
CWE-940
Code Injection
 Origin Validation Error
 Exposed Dangerous Method or Function
 Improper Verification of Source of a Communication Channel 		CVE-2026-44698 2026-05-30 01:25 2026-05-29 Show GitHub Exploit DB Packet Storm
938 7.5 HIGH
Network 		google chrome Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML pag… CWE-416
 Use After Free 		CVE-2026-9956 2026-05-30 01:20 2026-05-29 Show GitHub Exploit DB Packet Storm
939 8.2 HIGH
Network 		- - LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other ap… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-44843 2026-05-30 01:19 2026-05-27 Show GitHub Exploit DB Packet Storm
940 - - - Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via the command-line flag --enable-f… CWE-79
Cross-site Scripting 		CVE-2026-44903 2026-05-30 01:19 2026-05-27 Show GitHub Exploit DB Packet Storm