Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5481	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-43221	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5482	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43232	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5483	8.2	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43233	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5484	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43234	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5485	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43235	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5486	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43236	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5487	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43237	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5488	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2026-43238	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5489	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43239	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

5490	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43250	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2821	6.3	MEDIUM Network	-	-	Koel is a free, open-source music streaming solution. Prior to version 9.7.1, Koel contains a Server-Side Request Forgery (SSRF) vulnerability in the radio station creation endpoint (POST /api/radio/…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-50552	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

2822	7.3	HIGH Network	-	-	ApostropheCMS is an open-source Node.js content management system. Version 4.29.0 has a stored cross-site scripting vulnerability in the image widget functionality. A user with the Editor role can co…	CWE-79 CWE-116 Cross-site Scripting Improper Encoding or Escaping of Output	CVE-2026-45011	2026-06-16 01:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

2823	5.3	MEDIUM Local	-	-	A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in h…	CWE-285 CWE-939 Improper Authorization Improper Authorization in Handler for Custom URL Scheme	CVE-2026-12189	2026-06-16 01:16	2026-06-15	Show	GitHub Exploit DB Packet Storm

2824	4.8	MEDIUM Adjacent	-	-	Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which caches a pointer to the next list nod…	CWE-416 Use After Free	CVE-2026-10634	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

2825	6.5	MEDIUM Network	-	-	Contributor Cross Site Scripting (XSS) in Elizaibots <= 1.0.2 versions.	CWE-79 Cross-site Scripting	CVE-2025-15659	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

2826	5.9	MEDIUM Network	-	-	Administrator Cross Site Scripting (XSS) in WP Emmet <= 0.3.4 versions.	CWE-79 Cross-site Scripting	CVE-2025-15658	2026-06-16 01:16	2026-06-16	Show	GitHub Exploit DB Packet Storm

2827	5.3	MEDIUM Network	axios	axios	Axios is a promise based HTTP client for the browser and Node.js. From 1.15.2 to before 1.16.0, nested objects created by utils.merge() (e.g., config.proxy) are still constructed as plain {} with Obj…	CWE-113 CWE-1321 HTTP Response Splitting Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2026-44489	2026-06-16 01:13	2026-06-12	Show	GitHub Exploit DB Packet Storm

2828	7.5	HIGH Network	vllm	vllm	vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processi…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-5497	2026-06-16 01:11	2026-06-11	Show	GitHub Exploit DB Packet Storm

2829	10.0	CRITICAL Network	adobe	coldfusion	ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati…	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-47928	2026-06-16 00:20	2026-06-10	Show	GitHub Exploit DB Packet Storm

2830	9.1	CRITICAL Network	adobe	coldfusion	ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privi…	CWE-863 Incorrect Authorization	CVE-2026-47929	2026-06-16 00:18	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed