Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
193821	5.9	警告 Network	MEA Financial Enterprises, L.L.C.	-	iOS 用 Vision Bank アプリケーションにおけるサーバになりすまされる脆弱性	CWE-295 不正な証明書検証	CVE-2017-9559	2017-07-12 14:27	2017-06-12	Show	GitHub Exploit DB Packet Storm

193822	5.9	警告 Network	Wawa Employees Credit Union	-	iOS 用 Wawa Employees Credit Union Mobile アプリケーションにおけるサーバになりすまされる脆弱性	CWE-295 不正な証明書検証	CVE-2017-9558	2017-07-12 14:27	2017-06-12	Show	GitHub Exploit DB Packet Storm

193823	6	警告 Local	シスコシステムズ	-	Cisco Network Convergence System 5500 シリーズルータ用 Cisco IOS XR ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2017-6666	2017-07-12 13:48	2017-06-7	Show	GitHub Exploit DB Packet Storm

193824	9.8	緊急 Network	Red5	-	Red5 Media Server の AMF unmarshaller における任意のコードを実行される脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2017-5878	2017-07-11 18:07	2017-05-22	Show	GitHub Exploit DB Packet Storm

193825	5.4	警告 Network	SAP	-	SAP SuccessFactors における格納型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-9613	2017-07-11 17:52	2017-06-15	Show	GitHub Exploit DB Packet Storm

193826	6.1	警告 Network	Elasticsearch	-	Kibana におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-10366	2017-07-11 17:46	2016-10-24	Show	GitHub Exploit DB Packet Storm

193827	6.1	警告 Network	Elasticsearch	-	Kibana におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2016-10365	2017-07-11 17:46	2016-11-15	Show	GitHub Exploit DB Packet Storm

193828	6.1	警告 Network	Elasticsearch	-	Kibana におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1000220	2017-07-11 17:46	2016-08-3	Show	GitHub Exploit DB Packet Storm

193829	7.5	重要 Network	Elasticsearch	-	Kibana における認可に関する脆弱性	CWE-285 不適切な認可	CVE-2016-1000219	2017-07-11 17:46	2016-08-3	Show	GitHub Exploit DB Packet Storm

193830	6.1	警告 Network	Elasticsearch	-	Kibana におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-9056	2017-07-11 17:46	2015-12-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2541	8.8	HIGH Network	mozilla	firefox thunderbird	Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-269 Improper Privilege Management	CVE-2026-8972	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2542	8.8	HIGH Network	mozilla	firefox thunderbird	Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-269 Improper Privilege Management	CVE-2026-8957	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2543	8.8	HIGH Network	mozilla	firefox thunderbird	Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-269 Improper Privilege Management	CVE-2026-8955	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2544	8.8	HIGH Network	mozilla	firefox thunderbird	Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.	CWE-269 Improper Privilege Management	CVE-2026-8952	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2545	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid…	-	CVE-2026-8342	2026-05-21 02:16	2026-05-21	Show	GitHub Exploit DB Packet Storm

2546	7.1	HIGH Network	-	-	A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID, can bypass a security control intended to disable the implicit flow in OpenID Connect (OIDC) clie…	CWE-472 External Control of Assumed-Immutable Web Parameter	CVE-2026-7571	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2547	7.5	HIGH Network	-	-	A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim i…	CWE-290 Authentication Bypass by Spoofing	CVE-2026-7507	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2548	8.1	HIGH Network	-	-	A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malicious request, an attacker could bypass validation to redirect users to unauthorized URLs, potentiall…	CWE-601 Open Redirect	CVE-2026-7504	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2549	7.5	HIGH Network	-	-	A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high …	CWE-1286 Improper Validation of Syntactic Correctness of Input	CVE-2026-7307	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2550	6.8	MEDIUM Network	-	-	A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference (IDOR) vulnerability in the Authorization Services Protection API endpoint. By knowing or obtai…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-4630	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed