Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190621 7.8 重要
Local 		Lenovo - 複数の Lenovo ThinkPad 製品における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-3756 2017-09-27 16:19 2017-08-10 Show GitHub Exploit DB Packet Storm
190622 5.5 警告
Local 		MulticoreWare Inc. - MulticoreWare x265 における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2017-13666 2017-09-27 16:19 2017-08-23 Show GitHub Exploit DB Packet Storm
190623 6.8 警告
Physics 		Thales e-Security - Thales nShield Connect における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-1878 2017-09-27 16:19 2015-04-17 Show GitHub Exploit DB Packet Storm
190624 8.8 重要
Network 		IBM - IBM Emptoris Strategic Supply Management Platform におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-1097 2017-09-27 16:07 2017-08-7 Show GitHub Exploit DB Packet Storm
190625 8.8 重要
Network 		Lexmark - Lexmark Perceptive Document Filters におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-2822 2017-09-27 16:07 2017-08-28 Show GitHub Exploit DB Packet Storm
190626 8.8 重要
Network 		Lexmark - Lexmark Perceptive Document Filters における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2017-2821 2017-09-27 16:07 2017-08-28 Show GitHub Exploit DB Packet Storm
190627 5.9 警告
Network 		レッドハット - Red Hat Enterprise Virtualization Manager におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2015-5293 2017-09-27 15:14 2015-09-30 Show GitHub Exploit DB Packet Storm
190628 5.3 警告
Network 		Debian
Fedora Project
NTP Project		 - ntp における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5146 2017-09-27 15:14 2015-06-29 Show GitHub Exploit DB Packet Storm
190629 5.9 警告
Network 		openSUSE project
Python Software Foundation		 - Python および simplejson におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2014-4616 2017-09-27 15:13 2014-05-19 Show GitHub Exploit DB Packet Storm
190630 5.9 警告
Network 		SimpleSAMLphp - SimpleSAMLphp におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-12867 2017-09-27 15:05 2017-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1201 8.2 HIGH
Network 		- - code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted JSON payload in the 'g' HTTP hea… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-8890 2026-05-27 05:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1202 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… New - CVE-2026-8453 2026-05-27 05:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1203 3.1 LOW
Network 		- - TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter results by typebotId, allowing an authenticated user to load result data (user a… New CWE-639
CWE-862
 Authorization Bypass Through User-Controlled Key
 Missing Authorization 		CVE-2026-39967 2026-05-27 05:16 2026-05-23 Show GitHub Exploit DB Packet Storm
1204 - - - A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network. New CWE-79
Cross-site Scripting 		CVE-2026-6059 2026-05-27 05:14 2026-05-25 Show GitHub Exploit DB Packet Storm
1205 - - - An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjac… New CWE-78
OS Command  		CVE-2026-8652 2026-05-27 05:14 2026-05-25 Show GitHub Exploit DB Packet Storm
1206 - - - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_s… New - CVE-2026-43503 2026-05-27 05:06 2026-05-23 Show GitHub Exploit DB Packet Storm
1207 8.5 HIGH
Network 		- - A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the `reference` field… New CWE-88
Argument Injection 		CVE-2026-3515 2026-05-27 05:06 2026-05-24 Show GitHub Exploit DB Packet Storm
1208 7.8 HIGH
Local 		- - A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config… New CWE-1066
CVE-2026-4372 2026-05-27 05:06 2026-05-24 Show GitHub Exploit DB Packet Storm
1209 - - - This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing… New CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2026-9274 2026-05-27 05:04 2026-05-25 Show GitHub Exploit DB Packet Storm
1210 5.4 MEDIUM
Network 		- - JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately treated requests with… New CWE-352
 Origin Validation Error 		CVE-2026-40864 2026-05-27 05:03 2026-05-23 Show GitHub Exploit DB Packet Storm