Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
191121	9.8	緊急 Network	GraphicsMagick	-	GraphicsMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-11641	2017-08-25 16:04	2017-07-22	Show	GitHub Exploit DB Packet Storm

191122	8.8	重要 Network	GraphicsMagick	-	GraphicsMagick における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-11638	2017-08-25 16:04	2017-07-22	Show	GitHub Exploit DB Packet Storm

191123	9.8	緊急 Network	GraphicsMagick	-	GraphicsMagick における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-11637	2017-08-25 16:04	2017-07-22	Show	GitHub Exploit DB Packet Storm

191124	9.8	緊急 Network	GraphicsMagick	-	GraphicsMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-11636	2017-08-25 16:04	2017-07-22	Show	GitHub Exploit DB Packet Storm

191125	9.8	緊急 Network	GraphicsMagick	-	GraphicsMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-11643	2017-08-25 16:04	2017-07-22	Show	GitHub Exploit DB Packet Storm

191126	6.5	警告 Network	ImageMagick	-	ImageMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-11644	2017-08-25 15:19	2017-07-19	Show	GitHub Exploit DB Packet Storm

191127	6.5	警告 Network	ImageMagick	-	ImageMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-11640	2017-08-25 15:19	2017-07-19	Show	GitHub Exploit DB Packet Storm

191128	6.5	警告 Network	ImageMagick	-	ImageMagick におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-11639	2017-08-25 15:19	2017-07-19	Show	GitHub Exploit DB Packet Storm

191129	6.1	警告 Network	NexusPHP project	-	NexusPHP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-11651	2017-08-25 15:18	2017-07-26	Show	GitHub Exploit DB Packet Storm

191130	7.5	重要 Network	sipcrack	-	sipcrack におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-11655	2017-08-25 11:54	2017-07-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
881	9.8	CRITICAL Network	-	-	Web::Passwd versions through 0.03 for Perl is vulnerable to RCE. Web::Passwd is a small CGI application for managing htpasswd files using the htpasswd command. The user parameter is not validated o…	CWE-78 OS Command	CVE-2026-8500	2026-05-15 03:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

882	-		-	-	CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.	CWE-331 Insufficient Entropy	CVE-2026-4827	2026-05-15 03:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

883	7.7	HIGH Network	getgrav	grav	Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call config.toArray() from within a page body, dumping the entire mer…	CWE-200 NVD-CWE-noinfo Information Exposure	CVE-2026-44738	2026-05-15 03:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

884	2.5	LOW Local	-	-	PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_hash_to_sign() in src/podofo/private/OpenSSLInternal_Ripped.cpp. If EVP_DigestFin…	CWE-415 Double Free	CVE-2026-44348	2026-05-15 03:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

885	-		-	-	STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution (LCE) with the privileges of the user running STIGQter. Thi…	CWE-22 CWE-73 Path Traversal External Control of File Name or Path	CVE-2026-42881	2026-05-15 03:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

886	8.1	HIGH Network	getgrav	grav	Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permissions) to overwrite existi…	CWE-269 CWE-285 CWE-639 CWE-837 Improper Privilege Management Improper Authorization Authorization Bypass Through User-Controlled Key Improper Enforcement of a Single, Unique Action	CVE-2026-42609	2026-05-15 03:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

887	8.8	HIGH Network	arubanetworks	arubaos sd-wan	Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo…	CWE-77 Command Injection	CVE-2026-44869	2026-05-15 03:15	2026-05-13	Show	GitHub Exploit DB Packet Storm

888	1.8	LOW Physics	-	-	Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.	CWE-693 Protection Mechanism Failure	CVE-2026-30904	2026-05-15 03:15	2026-05-14	Show	GitHub Exploit DB Packet Storm

889	7.8	HIGH Local	-	-	External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via loca…	CWE-73 External Control of File Name or Path	CVE-2026-30905	2026-05-15 03:15	2026-05-14	Show	GitHub Exploit DB Packet Storm

890	7.8	HIGH Local	-	-	Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.	CWE-426 Untrusted Search Path	CVE-2026-30906	2026-05-15 03:15	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed