Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
731	6.5	警告 Local	Xen プロジェクト	Xen	Xen プロジェクトのXenにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-23557	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

732	7.8	重要 Local	Xen プロジェクト	Xen	Xen プロジェクトのXenにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-23558	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

733	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28732	2026-05-21 10:54	2026-05-18	Show	GitHub Exploit DB Packet Storm

734	6.5	警告 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-29207	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

735	6.5	警告 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-29220	2026-05-21 10:53	2026-05-19	Show	GitHub Exploit DB Packet Storm

736	7.3	重要 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-29226	2026-05-21 10:53	2026-05-19	Show	GitHub Exploit DB Packet Storm

737	7.5	重要 Network	HSC	MailInspector	HSCのMailInspectorにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-29962	2026-05-21 10:53	2026-05-18	Show	GitHub Exploit DB Packet Storm

738	7.5	重要 Network	HSC	MailInspector	HSCのMailInspectorにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-29963	2026-05-21 10:53	2026-05-18	Show	GitHub Exploit DB Packet Storm

739	6.1	警告 Network	HSC	MailInspector	HSCのMailInspectorにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-29964	2026-05-21 10:53	2026-05-18	Show	GitHub Exploit DB Packet Storm

740	6.1	警告 Network	HSC	MailInspector	HSCのMailInspectorにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-29965	2026-05-21 10:53	2026-05-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2001	6.5	MEDIUM Network	-	-	In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to local/private destinations, which may lead to information discl…	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-48845	2026-05-27 04:26	2026-05-26	Show	GitHub Exploit DB Packet Storm

2002	6.5	MEDIUM Network	-	-	In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information di…	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-48846	2026-05-27 04:26	2026-05-26	Show	GitHub Exploit DB Packet Storm

2003	3.7	LOW Network	-	-	Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2026-48847	2026-05-27 04:26	2026-05-26	Show	GitHub Exploit DB Packet Storm

2004	7.2	HIGH Network	-	-	Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element…	CWE-79 Cross-site Scripting	CVE-2026-48848	2026-05-27 04:26	2026-05-26	Show	GitHub Exploit DB Packet Storm

2005	4.4	MEDIUM Network	-	-	In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection on shared mailboxes.	CWE-79 Cross-site Scripting	CVE-2026-48849	2026-05-27 04:26	2026-05-26	Show	GitHub Exploit DB Packet Storm

2006	7.5	HIGH Network	powerdns	authoritative	Insufficient Validation of Autoprimary SOA Queries	CWE-400 Uncontrolled Resource Consumption	CVE-2026-42001	2026-05-27 04:24	2026-05-21	Show	GitHub Exploit DB Packet Storm

2007	7.5	HIGH Network	powerdns	authoritative	Concurrency and locking defects in GSS-TSIG	CWE-364 Signal Handler Race Condition	CVE-2026-42002	2026-05-27 04:23	2026-05-21	Show	GitHub Exploit DB Packet Storm

2008	6.5	MEDIUM Network	powerdns	authoritative	Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail	CWE-94 Code Injection	CVE-2026-42396	2026-05-27 04:19	2026-05-21	Show	GitHub Exploit DB Packet Storm

2009	-		-	-	XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions starting with 15.10.6 and prior to 18.1…	CWE-862 Missing Authorization	CVE-2026-33137	2026-05-27 04:16	2026-05-21	Show	GitHub Exploit DB Packet Storm

2010	-		-	-	An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator passwor…	CWE-20 Improper Input Validation	CVE-2026-3294	2026-05-27 04:08	2026-05-23	Show	GitHub Exploit DB Packet Storm