Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4781 7.5 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-200
CWE-522
CWE-862
CVE-2026-41266 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4782 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-639
CWE-915
CVE-2026-41267 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4783 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-41268 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4784 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-41269 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4785 8.3 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-284
CWE-918
CVE-2026-41270 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4786 8.3 重要
Network 		flowiseai flowise flowiseaiのflowiseにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41271 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4787 7.1 重要
Network 		flowiseai flowise flowiseaiのflowiseにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41272 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4788 8.2 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-41273 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4789 7.5 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-41275 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4790 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-41276 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
661 8.1 HIGH
Network 		- - Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before … New CWE-863
 Incorrect Authorization 		CVE-2026-44882 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
662 - - - Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before … New CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2026-44883 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
663 5.5 MEDIUM
Network 		- - Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before … New CWE-22
Path Traversal 		CVE-2026-44885 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
664 - - - FreePBX is an open source IP PBX. Prior to 17.0.8, the FreePBX api module's OAuth2 implementation does not sufficiently validate client credentials during token issuance. Knowledge of a valid client_… New CWE-1390
 Weak Authentication 		CVE-2026-44237 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
665 - - - FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administrati… New CWE-89
SQL Injection 		CVE-2026-44238 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
666 - - - FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without path sanitization. The $_REQUEST[… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2026-44239 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
667 8.8 HIGH
Network 		- - WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a classic shell-metacharacter injection. The YPTSocket notification branch in plugin/Live/on_publish.php builds an execAsyn… New CWE-78
OS Command  		CVE-2026-45578 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
668 5.4 MEDIUM
Network 		- - WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a stored cross-site scripting vulnerability. The Live plugin's "YouTube-style" view renders the live transmission's stream … New CWE-79
Cross-site Scripting 		CVE-2026-45580 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
669 6.5 MEDIUM
Network 		- - n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.51.3, the workflow telemetry sanitizer could retain partial fragments of … New CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-45582 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm
670 6.5 MEDIUM
Network 		- - WWBN AVideo is an open source video platform. In 29.0 and earlier, EpgParser.php, plugin/AI/receiveAsync.json.php, and other locations do not use the $resolvedIP out-param of isSSRFSafeURL() for DNS … New CWE-367
CWE-918
 Time-of-check Time-of-use (TOCTOU) Race Condition
Server-Side Request Forgery (SSRF)  		CVE-2026-45619 2026-05-30 00:06 2026-05-29 Show GitHub Exploit DB Packet Storm