Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4641	8.1	重要 Network	Gardyn	Gardin API	GardynのGardin APIにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-25197	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

4642	4.8	警告 Network	LibreNMS	LibreNMS	LibreNMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-2728	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

4643	7.5	重要 Network	Gardyn	Gardin API	GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-28766	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

4644	5.3	警告 Network	Gardyn	Gardin API	GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-28767	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

4645	3.7	低 Network	ERLANG	Erlang/OTP	ERLANGのErlang/OTPにおける予測可能な数字や識別子の生成に関する脆弱性	CWE-340 予測可能な数字や識別子の生成	CVE-2026-28810	2026-04-24 11:36	2026-04-7	Show	GitHub Exploit DB Packet Storm

4646	7.2	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-30804	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

4647	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-30806	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

4648	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-30809	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

4649	6.5	警告 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2026-30811	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

4650	5.4	警告 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-30812	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
321	3.3	LOW Local	-	-	A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null … New	CWE-404 CWE-476 Improper Resource Shutdown or Release NULL Pointer Dereference	CVE-2026-9503	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

322	5.3	MEDIUM Local	-	-	A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap… New	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-9502	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

323	3.3	LOW Local	-	-	A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipul… New	CWE-617 Reachable Assertion	CVE-2026-9501	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

324	3.7	LOW Network	-	-	PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. New	CWE-617 Reachable Assertion	CVE-2026-48852	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

325	3.1	LOW Network	-	-	PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session. New	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-48851	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

326	3.7	LOW Network	-	-	PuTTY 0.72 before 0.84 has a double free in RSA KEX. New	CWE-415 Double Free	CVE-2026-48850	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

327	-		-	-	Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which a… New	CWE-202 Exposure of Sensitive Information Through Data Queries	CVE-2026-42797	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

328	-		-	-	Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted c… New	CWE-653 Improper Isolation or Compartmentalization	CVE-2026-42782	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

329	4.3	MEDIUM Network	-	-	Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart allows Cross Site Request Forgery. This issue affects Organization chart: from n/a through 1.7.5. New	CWE-352 Origin Validation Error	CVE-2026-24597	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

330	6.5	MEDIUM Network	-	-	Cross-Site Request Forgery (CSRF) vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery. This issue affects Export WP Page to Static HTML/CSS: from n/a through … New	CWE-352 Origin Validation Error	CVE-2026-24574	2026-05-26 06:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed