Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1551	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な比較ロジックの粒度に関する脆弱性	CWE-1254 不正な比較ロジックの粒度	CVE-2026-28929	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1552	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28944	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1553	7.8	重要 Local	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28951	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1554	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28953	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1555	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-28954	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1556	5.5	警告 Local	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-28958	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1557	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-28962	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1558	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-28964	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1559	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28965	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1560	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-28969	2026-05-14 10:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2441	6.5	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after sending a forbidden response. Att…	CWE-863 Incorrect Authorization	CVE-2026-46362	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2442	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles. The vulnerability allows authent…	CWE-79 Cross-site Scripting	CVE-2026-46363	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2443	9.8	CRITICAL Network	-	-	phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent h…	CWE-89 SQL Injection	CVE-2026-46364	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2444	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. Any logged-in user, incl…	CWE-862 Missing Authorization	CVE-2026-46365	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2445	7.5	HIGH Network	-	-	phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated attackers to enumerate restricted …	CWE-863 Incorrect Authorization	CVE-2026-46366	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2446	7.6	HIGH Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in comments. Attackers can craf…	CWE-79 Cross-site Scripting	CVE-2026-46367	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2447	6.1	MEDIUM Network	siemens	teamcenter	A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All …	CWE-79 Cross-site Scripting	CVE-2026-33862	2026-05-19 02:23	2026-05-12	Show	GitHub Exploit DB Packet Storm

2448	4.3	MEDIUM Network	dovecot open-xchange	dovecot	An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left op…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-42006	2026-05-19 02:22	2026-05-12	Show	GitHub Exploit DB Packet Storm

2449	8.8	HIGH Network	fortinet	fortindr	An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions…	CWE-89 SQL Injection	CVE-2026-25088	2026-05-19 02:19	2026-05-13	Show	GitHub Exploit DB Packet Storm

2450	6.5	MEDIUM Network	fortinet	fortideceptor	An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2…	CWE-88 Argument Injection	CVE-2026-25690	2026-05-19 02:17	2026-05-13	Show	GitHub Exploit DB Packet Storm