Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196891 7.5 重要
Network 		アップル - Apple iOS の Phone コンポーネントにおける任意の番号に発信される脆弱性 CWE-254
セキュリティ機能 		CVE-2017-2484 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196892 4.6 警告
Physics 		アップル - Apple iOS の Siri コンポーネントにおけるロック画面のテキストメッセージを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2017-2452 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196893 9.8 緊急
Network 		アップル - Apple iOS の HomeKit コンポーネントにおける脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2434 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196894 5.3 警告
Network 		アップル - Apple iOS の DataAccess コンポーネントにおける Exchange トラフィックにアクセスされる脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2414 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196895 7.5 重要
Network 		アップル - Apple iOS のクイックルックコンポーネントにおける任意の番号に電話が発信される脆弱性 CWE-254
セキュリティ機能 		CVE-2017-2404 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196896 5.3 警告
Network 		アップル - Apple iOS の SafariViewController コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-2400 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196897 4.6 警告
Physics 		アップル - Apple iOS のペーストボードコンポーネントにおけるペーストボードを読まれる脆弱性 CWE-320
鍵管理のエラー 		CVE-2017-2399 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196898 6.1 警告
Network 		アップル - Apple iOS の Safari リーダーコンポーネントにおけるユニバーサルクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-2393 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196899 3.3 低
Local 		アップル - Apple iOS の Safari コンポーネントにおけるプライベートブラウズモードでユーザが閲覧した Web サイトを特定される脆弱性 CWE-200
情報漏えい 		CVE-2017-2384 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
196900 7.5 重要
Network 		アップル - Apple iOS のプロファイルコンポーネントの Simple Certificate Enrollment Protocol における暗号保護メカニズムを回避される脆弱性 CWE-326
不適切な暗号強度 		CVE-2017-2380 2017-04-13 13:32 2017-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1471 - - - An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiali… CWE-125
Out-of-bounds Read 		CVE-2024-21950 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1472 - - - Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a vict… CWE-284
Improper Access Control 		CVE-2024-36323 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1473 - - - Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arb… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2024-36334 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1474 - - - A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an atta… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-52532 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1475 - - - Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resu… CWE-1189
CVE-2025-54518 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1476 - - - Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo… CWE-1327
 Binding to an Unrestricted IP Address 		CVE-2026-0481 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1477 6.8 MEDIUM
Network 		pyload-ng_project pyload-ng pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … CWE-295
CWE-306
CWE-863
Improper Certificate Validation 
Missing Authentication for Critical Function
 Incorrect Authorization 		CVE-2026-42312 2026-05-15 23:09 2026-05-12 Show GitHub Exploit DB Packet Storm
1478 6.4 MEDIUM
Network 		- - The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_default_button' shortcode in all versions up to, and including, 14.3.2. This is due to insufficient input sanitiz… CWE-79
Cross-site Scripting 		CVE-2026-6646 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm
1479 6.5 MEDIUM
Network 		- - The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endpoint in all versions up to, and … CWE-862
 Missing Authorization 		CVE-2026-4683 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm
1480 8.1 HIGH
Network 		- - The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_head' function in all versions up… CWE-862
 Missing Authorization 		CVE-2026-4094 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm