Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1021 9.8 緊急
Network 		libexpat project libexpat libexpat projectのlibexpatにおけるエントロピー不足に関する脆弱性 CWE-331
エントロピー不足 		CVE-2026-7210 2026-05-18 11:24 2026-05-11 Show GitHub Exploit DB Packet Storm
1022 8.8 重要
Adjacent 		ZyXEL WRE6505 ファームウェア ZyXELのWRE6505 ファームウェアにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-7256 2026-05-18 11:24 2026-05-12 Show GitHub Exploit DB Packet Storm
1023 4.4 警告
Local 		ZyXEL WRE6505 ファームウェア ZyXELのWRE6505 ファームウェアにおける重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2026-7257 2026-05-18 11:24 2026-05-12 Show GitHub Exploit DB Packet Storm
1024 7.5 重要
Network 		ZyXEL NWA1100-N ファームウェア ZyXELのNWA1100-N ファームウェアにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-7287 2026-05-18 11:24 2026-05-12 Show GitHub Exploit DB Packet Storm
1025 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7377 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1026 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-8305 2026-05-18 11:23 2026-05-11 Show GitHub Exploit DB Packet Storm
1027 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-8401 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
1028 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-8581 2026-05-18 11:23 2026-05-14 Show GitHub Exploit DB Packet Storm
1029 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるアセットへのアクセス後に実装されたアクセス制御チェックに関する脆弱性 CWE-1280
アセットへのアクセス後に実装されたアクセス制御チェック 		CVE-2026-3607 2026-05-18 11:23 2026-05-14 Show GitHub Exploit DB Packet Storm
1030 9.8 緊急
Network 		フォーティネット FortiSandbox
FortiSandbox PaaS
FortiSandbox Cloud 		フォーティネットのFortiSandbox等の複数製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-26083 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1721 - - - An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-0240 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1722 - - - Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-0241 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1723 - - - A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an at… CWE-89
SQL Injection 		CVE-2026-0242 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1724 - - - An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller. CWE-295
Improper Certificate Validation  		CVE-2026-0244 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1725 - - - Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Andro… CWE-200
Information Exposure 		CVE-2026-0245 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1726 - - - A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on ma… CWE-862
 Missing Authorization 		CVE-2026-0246 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1727 - - - Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations. CWE-306
Missing Authentication for Critical Function 		CVE-2026-0247 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1728 - - - An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By pr… CWE-295
Improper Certificate Validation  		CVE-2026-0248 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1729 - - - Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint… CWE-295
Improper Certificate Validation  		CVE-2026-0249 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1730 - - - A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with S… CWE-787
 Out-of-bounds Write 		CVE-2026-0250 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm