Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193961 7.5 重要
Network 		Erik Andersen - uClibc の misc/regex/regexec.c の check_dst_limits_calc_pos_1 関数におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2017-9729 2017-07-7 17:53 2017-06-16 Show GitHub Exploit DB Packet Storm
193962 9.8 緊急
Network 		Erik Andersen - uClibc の misc/regex/regexec.c の get_subexp 関数における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-9728 2017-07-7 17:53 2017-06-16 Show GitHub Exploit DB Packet Storm
193963 8.8 重要
Network 		Zenbership - Zenbership における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-9759 2017-07-7 17:47 2017-06-9 Show GitHub Exploit DB Packet Storm
193964 6.1 警告
Network 		CMS Made Simple - CMS Made Simple の admin\addgroup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-9668 2017-07-7 17:47 2017-06-17 Show GitHub Exploit DB Packet Storm
193965 9.8 緊急
Network 		レッドハット - JBoss EAP の PooledInvokerServlet における任意のコードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2016-3690 2017-07-7 16:51 2016-11-11 Show GitHub Exploit DB Packet Storm
193966 5.5 警告
Local 		Google - Linux Kernel を使用している CAF リリースの Android における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-8239 2017-07-7 16:50 2017-06-5 Show GitHub Exploit DB Packet Storm
193967 5.5 警告
Local 		Google - Linux Kernel を使用している CAF リリースの Android におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2017-8235 2017-07-7 16:50 2017-06-5 Show GitHub Exploit DB Packet Storm
193968 7.8 重要
Local 		Google - Linux Kernel を使用している CAF リリースの Android におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-8234 2017-07-7 16:50 2017-06-5 Show GitHub Exploit DB Packet Storm
193969 7.8 重要
Local 		Google - Linux Kernel を使用している CAF リリースの Android のカメラドライバ機能における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2017-8233 2017-07-7 16:50 2017-06-5 Show GitHub Exploit DB Packet Storm
193970 7 重要
Local 		Google - Android の MediaTek サウンドドライバにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0649 2017-07-7 16:50 2017-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2391 9.1 CRITICAL
Network 		- - A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-33000 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2392 7.8 HIGH
Local 		mullvad mullvad_vpn Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation during installation or upgrade. The installer… CWE-269
CWE-345
CWE-427
NVD-CWE-noinfo
 Improper Privilege Management
 Insufficient Verification of Data Authenticity
 Uncontrolled Search Path Element 		CVE-2026-32323 2026-05-22 09:04 2026-05-19 Show GitHub Exploit DB Packet Storm
2393 4.3 MEDIUM
Network 		glpi-project glpi GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue… CWE-862
 Missing Authorization 		CVE-2026-32312 2026-05-22 08:57 2026-05-19 Show GitHub Exploit DB Packet Storm
2394 3.5 LOW
Network 		github cli `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users vie… CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences 		CVE-2026-45803 2026-05-22 08:47 2026-05-16 Show GitHub Exploit DB Packet Storm
2395 10.0 CRITICAL
Network 		microsoft azure_local
azure_resource_manager 		Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. CWE-287
NVD-CWE-noinfo
Improper Authentication 		CVE-2026-42822 2026-05-22 08:45 2026-05-19 Show GitHub Exploit DB Packet Storm
2396 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-5297 2026-05-22 08:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2397 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-8352 2026-05-22 06:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2398 8.8 HIGH
Network 		- - IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the… CWE-88
Argument Injection 		CVE-2026-47114 2026-05-22 06:03 2026-05-22 Show GitHub Exploit DB Packet Storm
2399 4.3 MEDIUM
Network 		- - The GSheet For Woo Importer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the process_ajax_restore_action() function in all versions up to, and … CWE-862
 Missing Authorization 		CVE-2026-4843 2026-05-22 06:03 2026-05-22 Show GitHub Exploit DB Packet Storm
2400 6.1 MEDIUM
Network 		simplesamlphp simplesamlphp-casserver
simplesamlphp_casserver 		SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. In versions below 6.3.1 and 7.0.0, the logout endpoint accepts a url query parameter to redire… CWE-601
Open Redirect 		CVE-2025-65954 2026-05-22 06:01 2026-05-19 Show GitHub Exploit DB Packet Storm