Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1201 5.3 警告
Network 		Anviz Global Anviz CX7 Firmware Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-35061 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
1202 9.8 緊急
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35546 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
1203 8.8 重要
Network 		Anviz Global Anviz CX2 Lite Firmware Anviz GlobalのAnviz CX2 Lite Firmwareにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-35682 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1204 7.5 重要
Network 		Belkin International N300 firmware U-SpeedのN300 Firmwareにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-36958 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1205 7.5 重要
Network 		Belkin International N300 firmware U-SpeedのN300 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-36959 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1206 8.8 重要
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品におけるダウンロードしたコードの完全性検証不備に関する脆弱性 CWE-494
ダウンロードしたコードの完全性検証不備 		CVE-2026-40066 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1207 8.1 重要
Adjacent 		Anviz Global Crosschex Standard Anviz GlobalのCrosschex Standardにおける通信チャネルの送信元の不適切な検証に関する脆弱性 CWE-940
通信チャネルの送信元の不適切な検証 		CVE-2026-40434 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1208 7.5 重要
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-40461 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1209 5.3 警告
Network 		asrmicro ASR1901 Firmware
ASR1903 Firmware 		asrmicroのASR1901 Firmware等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42800 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1210 7.5 重要
Network 		OpenStack Ironic Python Agent OpenStackのIronic Python Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-43003 2026-05-7 11:29 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
691 7.8 HIGH
Local 		- - libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows an attacker to cause a controlled heap out-of-boun… New CWE-122
CWE-190
CWE-787
Heap-based Buffer Overflow
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-42046 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
692 7.3 HIGH
Network 		- - An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function New CWE-94
Code Injection 		CVE-2026-37630 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
693 8.8 HIGH
Network 		- - EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient… New CWE-77
Command Injection 		CVE-2026-36734 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
694 8.1 HIGH
Network 		- - Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/s… New CWE-78
OS Command  		CVE-2026-30635 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
695 7.5 HIGH
Network 		- - A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files f… New CWE-22
Path Traversal 		CVE-2026-2614 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
696 - - - Reserved. Details will be published at disclosure. New - CVE-2026-45391 2026-05-12 23:16 2026-05-12 Show GitHub Exploit DB Packet Storm
697 - - - Reserved. Details will be published at disclosure. New - CVE-2026-45392 2026-05-12 23:16 2026-05-12 Show GitHub Exploit DB Packet Storm
698 - - - Reserved. Details will be published at disclosure. New - CVE-2026-45393 2026-05-12 23:16 2026-05-12 Show GitHub Exploit DB Packet Storm
699 - - - dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-co… New - CVE-2026-2291 2026-05-12 23:15 2026-05-12 Show GitHub Exploit DB Packet Storm
700 - - - Wellbia's XIGNCODE3 xhunter1.sys kernel driver Privilege Escalation Vulnerability provides access to IRP_MJ_REITS command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Cr… New - CVE-2026-3609 2026-05-12 23:15 2026-05-12 Show GitHub Exploit DB Packet Storm