Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4721	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35238	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4722	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35239	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4723	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35240	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4724	7.5	重要 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35242	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4725	7.5	重要 Network	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35245	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4726	7.5	重要 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35246	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4727	6	警告 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35247	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4728	5	警告 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35248	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4729	3.2	低 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35249	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

4730	2.3	低 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35250	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
571	8.1	HIGH Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In src/juniper_plugin/fastnetmon_juniper.php, the $IP_ATTACK vari… New	CWE-77 CWE-78 Command Injection OS Command	CVE-2026-48694	2026-05-28 00:53	2026-05-27	Show	GitHub Exploit DB Packet Storm

572	8.1	HIGH Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fastnetmon_mikrotik.php… New	CWE-78 OS Command	CVE-2026-48695	2026-05-28 00:51	2026-05-27	Show	GitHub Exploit DB Packet Storm

573	6.2	MEDIUM Local	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689. New	CWE-120 CWE-676 Classic Buffer Overflow Use of Potentially Dangerous Function	CVE-2026-48696	2026-05-28 00:42	2026-05-27	Show	GitHub Exploit DB Packet Storm

574	7.2	HIGH Network	ibm	engineering_lifecycle_management	IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted. New	CWE-749 Exposed Dangerous Method or Function	CVE-2026-4051	2026-05-28 00:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

575	7.2	HIGH Network	citeum	opencti	OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a differ… New	CWE-284 NVD-CWE-noinfo Improper Access Control	CVE-2026-44730	2026-05-28 00:40	2026-05-27	Show	GitHub Exploit DB Packet Storm

576	7.4	HIGH Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function in src/fast_library.cpp creates a boost::asio::ssl… New	CWE-295 Improper Certificate Validation	CVE-2026-48697	2026-05-28 00:31	2026-05-27	Show	GitHub Exploit DB Packet Storm

577	5.3	MEDIUM Network	apache	apache-airflow-providers-fab	Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache… New	CWE-90 LDAP Injection	CVE-2026-46745	2026-05-28 00:31	2026-05-25	Show	GitHub Exploit DB Packet Storm

578	9.8	CRITICAL Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH attribute encoder. In src/bgp_protocol.hpp, the IPv4UnicastAnnounce::get_attributes() function computes attr… New	CWE-190 Integer Overflow or Wraparound	CVE-2026-48691	2026-05-28 00:29	2026-05-27	Show	GitHub Exploit DB Packet Storm

579	6.5	MEDIUM Network	struktur	libheif	libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file can trigger an out-of-bounds read in core sequence parsing logic, causing DoS.… New	CWE-125 CWE-476 Out-of-bounds Read NULL Pointer Dereference	CVE-2026-41069	2026-05-28 00:26	2026-05-23	Show	GitHub Exploit DB Packet Storm

580	8.1	HIGH Network	struktur	libheif	libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track's chun… New	CWE-125 Out-of-bounds Read	CVE-2026-41071	2026-05-28 00:25	2026-05-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed