Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4751 8.1 重要
Network 		tandoor recipes tandoorのrecipesにおけるHTTP ヘッダのスクリプト構文の不適切な無効化に関する脆弱性 CWE-644
HTTP ヘッダのスクリプト構文の不適切な無効化 		CVE-2026-33149 2026-04-24 11:30 2026-03-26 Show GitHub Exploit DB Packet Storm
4752 4.6 警告
Network 		Docmost Docmost Docmostにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-33193 2026-04-24 11:30 2026-04-14 Show GitHub Exploit DB Packet Storm
4753 6.5 警告
Network 		Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-33461 2026-04-24 11:30 2026-04-8 Show GitHub Exploit DB Packet Storm
4754 4.8 警告
Network 		cryptomator cryptomator cryptomatorにおける複数の脆弱性 CWE-305
CWE-319
CVE-2026-33472 2026-04-24 11:30 2026-04-16 Show GitHub Exploit DB Packet Storm
4755 5.5 警告
Network 		Pinchtab PinchTab PinchtabのPinchTabにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-33619 2026-04-24 11:30 2026-03-26 Show GitHub Exploit DB Packet Storm
4756 6.5 警告
Network 		Pinchtab PinchTab PinchtabのPinchTabにおける複数の脆弱性 CWE-290
CWE-770
CVE-2026-33621 2026-04-24 11:30 2026-03-26 Show GitHub Exploit DB Packet Storm
4757 7.5 重要
Network 		InternLM LMDeploy InternLMのLMDeployにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-33626 2026-04-24 11:30 2026-04-20 Show GitHub Exploit DB Packet Storm
4758 6.1 警告
Network 		Project Jupyter JupyterHub Project JupyterのJupyterHubにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-33709 2026-04-24 11:30 2026-04-3 Show GitHub Exploit DB Packet Storm
4759 7.2 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-33714 2026-04-24 11:30 2026-04-14 Show GitHub Exploit DB Packet Storm
4760 7.2 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおける複数の脆弱性 CWE-306
CWE-918
CVE-2026-33715 2026-04-24 11:30 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 5.5 MEDIUM
Local 		- - BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attacker-controlled symli… New CWE-59
Link Following 		CVE-2026-40610 2026-05-27 01:16 2026-05-23 Show GitHub Exploit DB Packet Storm
212 7.8 HIGH
Local 		- - gix-submodule before 0.82.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized … New CWE-77
Command Injection 		CVE-2026-40034 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
213 8.8 HIGH
Network 		- - FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory. The vulnerability occurs because rectangle v… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-40033 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
214 - - - An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-l… New - CVE-2026-38587 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
215 7.0 HIGH
Local 		samba rsync Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replac… Update CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-29518 2026-05-27 01:16 2026-05-20 Show GitHub Exploit DB Packet Storm
216 7.8 HIGH
Local 		- - A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. New CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-25112 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
217 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from… New CWE-787
 Out-of-bounds Write 		CVE-2026-46300 2026-05-27 00:46 2026-05-23 Show GitHub Exploit DB Packet Storm
218 7.3 HIGH
Network 		- - A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoint. The manipulation of the argument Valu… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9552 2026-05-27 00:17 2026-05-27 Show GitHub Exploit DB Packet Storm
219 7.3 HIGH
Network 		- - A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xp_cmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The … New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9551 2026-05-27 00:17 2026-05-27 Show GitHub Exploit DB Packet Storm
220 7.3 HIGH
Network 		- - A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. Affected by this issue is some unknown functionality of the file /SubstationWE… New CWE-22
Path Traversal 		CVE-2026-9550 2026-05-27 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm