Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6191 9.8 緊急
Network
n8n n8n n8nにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-42233 2026-05-8 12:22 2026-05-4 Show GitHub Exploit DB Packet Storm
6192 8.8 重要
Network
n8n n8n n8nにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-42234 2026-05-8 12:22 2026-05-4 Show GitHub Exploit DB Packet Storm
6193 9.6 緊急
Network
n8n n8n n8nにおける複数の脆弱性 CWE-79
CWE-87
CVE-2026-42235 2026-05-8 12:22 2026-05-4 Show GitHub Exploit DB Packet Storm
6194 7.5 重要
Network
n8n n8n n8nにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-42236 2026-05-8 12:22 2026-05-4 Show GitHub Exploit DB Packet Storm
6195 8.8 重要
Network
n8n n8n n8nにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-42237 2026-05-8 12:22 2026-05-4 Show GitHub Exploit DB Packet Storm
6196 9.8 緊急
Network
nginxui Nginx UI Nginx UI TeamのNginx UIにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-42238 2026-05-8 12:22 2026-05-4 Show GitHub Exploit DB Packet Storm
6197 7.7 重要
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-42438 2026-05-8 12:22 2026-05-5 Show GitHub Exploit DB Packet Storm
6198 8.5 重要
Network
OpenClaw OpenClaw OpenClawにおける複数の脆弱性 CWE-862
CWE-918
CVE-2026-42439 2026-05-8 12:22 2026-05-5 Show GitHub Exploit DB Packet Storm
6199 7.5 重要
Network
Apache Software Foundation Apache OpenNLP Apache Software FoundationのApache OpenNLPにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て
CVE-2026-42440 2026-05-8 12:22 2026-05-4 Show GitHub Exploit DB Packet Storm
6200 6.1 警告
Network
Apache Software Foundation Apache Wicket Apache Software FoundationのApache Wicketにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-42509 2026-05-8 12:22 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2081 6.1 MEDIUM
Local
docker
mobyproject
engine
moby
moby\/v2
Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during … CWE-81
CWE-367
 Improper Neutralization of Script in an Error Message Web Page
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-41568 2026-06-17 03:31 2026-06-13 Show GitHub Exploit DB Packet Storm
2082 7.2 HIGH
Local
docker
mobyproject
engine
moby
moby\/v2
Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during … CWE-61
CWE-367
 UNIX Symbolic Link (Symlink) Following
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-42306 2026-06-17 03:31 2026-06-13 Show GitHub Exploit DB Packet Storm
2083 5.5 MEDIUM
Local
amd uprof Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-28237 2026-06-17 03:08 2026-06-10 Show GitHub Exploit DB Packet Storm
2084 5.5 MEDIUM
Local
amd uprof Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service. CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-0466 2026-06-17 03:05 2026-06-10 Show GitHub Exploit DB Packet Storm
2085 5.5 MEDIUM
Local
gpac gpac A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-416
 Use After Free
CVE-2025-55650 2026-06-17 02:39 2026-06-16 Show GitHub Exploit DB Packet Storm
2086 5.5 MEDIUM
Local
gpac gpac A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-476
 NULL Pointer Dereference
CVE-2025-55649 2026-06-17 02:39 2026-06-16 Show GitHub Exploit DB Packet Storm
2087 5.5 MEDIUM
Local
gpac gpac A heap buffer overflow in the gf_opus_parse_packet_header function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-122
Heap-based Buffer Overflow
CVE-2025-55648 2026-06-17 02:39 2026-06-16 Show GitHub Exploit DB Packet Storm
2088 5.5 MEDIUM
Local
gpac gpac An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-190
 Integer Overflow or Wraparound
CVE-2025-55647 2026-06-17 02:38 2026-06-16 Show GitHub Exploit DB Packet Storm
2089 5.5 MEDIUM
Local
gpac gpac A heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-122
Heap-based Buffer Overflow
CVE-2025-55645 2026-06-17 02:38 2026-06-16 Show GitHub Exploit DB Packet Storm
2090 5.5 MEDIUM
Local
gpac gpac A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. CWE-416
 Use After Free
CVE-2025-55644 2026-06-17 02:37 2026-06-16 Show GitHub Exploit DB Packet Storm