Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190671 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2015-8592 2017-09-12 17:15 2015-12-17 Show GitHub Exploit DB Packet Storm
190672 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-9052 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190673 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-9051 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190674 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2015-9050 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190675 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-9049 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190676 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-9048 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190677 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2015-9047 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190678 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-9046 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190679 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2015-9045 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
190680 9.8 緊急
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-9044 2017-09-12 17:04 2017-07-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261 - - - Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the discourse-subscriptions plugin allows users to gain a… New CWE-862
 Missing Authorization 		CVE-2026-34154 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
262 5.9 MEDIUM
Network 		- - LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attack… New CWE-863
 Incorrect Authorization 		CVE-2026-41470 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
263 0.0 NONE
Network 		- - Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Versions 2.0.0 through 2.14.1 still allow protocol-relative host override when the request tar… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-33637 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
264 9.9 CRITICAL
Network 		- - Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validation on composition offsets using unsigned … New CWE-125
CWE-190
CWE-787
Out-of-bounds Read
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-33642 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
265 - - - Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64 … New CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-8370 2026-05-20 06:01 2026-05-20 Show GitHub Exploit DB Packet Storm
266 8.8 HIGH
Network 		getgrav grav Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user with api.media.write can abuse /api/v1/blueprint-upload to write an arbitrary YAML file into user/acco… Update CWE-269
CWE-434
 Improper Privilege Management
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-42844 2026-05-20 06:00 2026-05-13 Show GitHub Exploit DB Packet Storm
267 7.5 HIGH
Network 		- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation and missing capability check in … New CWE-23
 Relative Path Traversal 		CVE-2026-8073 2026-05-20 06:00 2026-05-20 Show GitHub Exploit DB Packet Storm
268 6.5 MEDIUM
Network 		- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6. This is due to the plugin not p… New CWE-862
 Missing Authorization 		CVE-2026-8096 2026-05-20 06:00 2026-05-20 Show GitHub Exploit DB Packet Storm
269 7.8 HIGH
Local 		protobufjs_project protobufjs-cli protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbts invoked JSDoc by building a shell command string from input file paths and executing it through child_process… Update CWE-78
OS Command  		CVE-2026-42290 2026-05-20 05:56 2026-05-14 Show GitHub Exploit DB Packet Storm
270 5.3 MEDIUM
Network 		protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decoded … Update CWE-176
 Improper Handling of Unicode Encoding 		CVE-2026-44288 2026-05-20 05:46 2026-05-14 Show GitHub Exploit DB Packet Storm