Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1581	6.5	警告 Local	Linux Containers	LXC	Linux ContainersのLXCにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-39402	2026-05-14 10:19	2026-05-5	Show	GitHub Exploit DB Packet Storm

1582	8.8	重要 Network	Pi-hole	FTLDNS	Pi-holeのFTLDNSにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-39849	2026-05-14 10:19	2026-05-5	Show	GitHub Exploit DB Packet Storm

1583	7.5	重要 Network		-	アップルのmacOSにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-39871	2026-05-14 10:19	2026-05-11	Show	GitHub Exploit DB Packet Storm

1584	8.8	重要 Network	Anthropic PBC	Claude Code	Anthropic PBCのClaude Codeにおける複数の脆弱性	CWE-20 CWE-77 CWE-noinfo	CVE-2026-40068	2026-05-14 10:19	2026-05-5	Show	GitHub Exploit DB Packet Storm

1585	7.5	重要 Network	OpenMRS	OpenMRS	OpenMRSにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40075	2026-05-14 10:19	2026-05-5	Show	GitHub Exploit DB Packet Storm

1586	7.8	重要 Local	デル	Dell ObjectScale elastic cloud storage	デルのelastic cloud storage等の複数製品におけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-40636	2026-05-14 10:19	2026-05-11	Show	GitHub Exploit DB Packet Storm

1587	6.7	警告 Local	デル	insightiq	デルのinsightiqにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-40638	2026-05-14 10:19	2026-05-12	Show	GitHub Exploit DB Packet Storm

1588	7.5	重要 Network	VMware	Spring Cloud Config	VMwareのSpring Cloud Configにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-40981	2026-05-14 10:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

1589	9.1	緊急 Network	VMware	Spring Cloud Config	VMwareのSpring Cloud Configにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40982	2026-05-14 10:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

1590	8.1	重要 Network	VMware	Spring Cloud Config	VMwareのSpring Cloud ConfigにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41002	2026-05-14 10:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2441	6.5	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after sending a forbidden response. Att…	CWE-863 Incorrect Authorization	CVE-2026-46362	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2442	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles. The vulnerability allows authent…	CWE-79 Cross-site Scripting	CVE-2026-46363	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2443	9.8	CRITICAL Network	-	-	phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent h…	CWE-89 SQL Injection	CVE-2026-46364	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2444	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. Any logged-in user, incl…	CWE-862 Missing Authorization	CVE-2026-46365	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2445	7.5	HIGH Network	-	-	phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated attackers to enumerate restricted …	CWE-863 Incorrect Authorization	CVE-2026-46366	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2446	7.6	HIGH Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in comments. Attackers can craf…	CWE-79 Cross-site Scripting	CVE-2026-46367	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2447	6.1	MEDIUM Network	siemens	teamcenter	A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All …	CWE-79 Cross-site Scripting	CVE-2026-33862	2026-05-19 02:23	2026-05-12	Show	GitHub Exploit DB Packet Storm

2448	4.3	MEDIUM Network	dovecot open-xchange	dovecot	An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left op…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-42006	2026-05-19 02:22	2026-05-12	Show	GitHub Exploit DB Packet Storm

2449	8.8	HIGH Network	fortinet	fortindr	An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions…	CWE-89 SQL Injection	CVE-2026-25088	2026-05-19 02:19	2026-05-13	Show	GitHub Exploit DB Packet Storm

2450	6.5	MEDIUM Network	fortinet	fortideceptor	An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2…	CWE-88 Argument Injection	CVE-2026-25690	2026-05-19 02:17	2026-05-13	Show	GitHub Exploit DB Packet Storm