Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191681 7 重要
Local 		サムスン - Android の Samsung デバイスにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2015-7891 2017-08-30 18:16 2015-07-30 Show GitHub Exploit DB Packet Storm
191682 7.5 重要
Network 		Fabrice Bellard - QEMU におけるデータ処理に関する脆弱性 CWE-19
データ処理 		CVE-2017-10664 2017-08-30 17:50 2017-06-11 Show GitHub Exploit DB Packet Storm
191683 6.5 警告
Network 		Pegasystems Inc. - PEGA Platform における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-11356 2017-08-30 17:44 2017-07-17 Show GitHub Exploit DB Packet Storm
191684 6.1 警告
Network 		Pegasystems Inc. - PEGA Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-11355 2017-08-30 17:43 2017-07-17 Show GitHub Exploit DB Packet Storm
191685 6.5 警告
Network 		GitLab.org - GitLab Enterprise Edition における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-11437 2017-08-30 17:32 2017-07-19 Show GitHub Exploit DB Packet Storm
191686 7 重要
Local 		Earcms - Earcms Ear Music における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2017-11756 2017-08-30 17:28 2017-07-30 Show GitHub Exploit DB Packet Storm
191687 5.5 警告
Local 		Xiph.Org - Xiph.Org libvorbis におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-11333 2017-08-30 17:28 2017-07-30 Show GitHub Exploit DB Packet Storm
191688 8.8 重要
Network 		Techroutes - Techroutes TR 1803-3G Wireless Cellular Router/Modem におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-11648 2017-08-30 16:58 2017-08-1 Show GitHub Exploit DB Packet Storm
191689 6.1 警告
Network 		ConnectWise, Inc. - ConnectWise Manage におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-11727 2017-08-30 16:51 2017-07-31 Show GitHub Exploit DB Packet Storm
191690 8.8 重要
Network 		ConnectWise, Inc. - ConnectWise Manage におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-11726 2017-08-30 16:51 2017-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2241 7.8 HIGH
Local 		- - Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path… CWE-428
 Unquoted Search Path or Element 		CVE-2020-37230 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2242 7.5 HIGH
Network 		- - Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoi… CWE-22
Path Traversal 		CVE-2021-47942 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2243 9.8 CRITICAL
Network 		- - GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file uploa… CWE-306
Missing Authentication for Critical Function 		CVE-2018-25332 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2244 8.2 HIGH
Network 		- - Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the … CWE-89
SQL Injection 		CVE-2018-25333 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2245 9.1 CRITICAL
Network 		- - OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Core evaluates databas… CWE-94
Code Injection 		CVE-2026-41258 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2246 - - - LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL back… CWE-327
CWE-347
 Use of a Broken or Risky Cryptographic Algorithm
 Improper Verification of Cryptographic Signature 		CVE-2026-44699 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2247 7.5 HIGH
Network 		- - The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-44714 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2248 9.8 CRITICAL
Network 		- - MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitiz… CWE-94
Code Injection 		CVE-2026-44717 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2249 5.5 MEDIUM
Local 		- - Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-46383 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2250 8.8 HIGH
Network 		google chrome Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hig… CWE-787
 Out-of-bounds Write 		CVE-2026-8524 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm