Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
197141	6.5	警告 Network	アップル	-	複数の Apple 製品などで使用される WebKit における同一生成元ポリシーを回避される脆弱性	CWE-200 情報漏えい	CVE-2017-2363	2017-02-27 18:05	2017-01-23	Show	GitHub Exploit DB Packet Storm

197142	8.8	重要 Network	アップル	-	複数の Apple 製品などで使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-2362	2017-02-27 18:05	2017-01-23	Show	GitHub Exploit DB Packet Storm

197143	6.5	警告 Network	アップル	-	Apple Safari の Safari コンポーネントにおけるアドレスバーを偽装される脆弱性	CWE-254 セキュリティ機能	CVE-2017-2359	2017-02-27 17:38	2017-01-23	Show	GitHub Exploit DB Packet Storm

197144	8.8	重要 Network	アップル	-	複数の Apple 製品などで使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-2356	2017-02-27 17:22	2017-01-23	Show	GitHub Exploit DB Packet Storm

197145	8.8	重要 Network	アップル	-	複数の Apple 製品などで使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-2355	2017-02-27 17:22	2017-01-23	Show	GitHub Exploit DB Packet Storm

197146	8.8	重要 Network	アップル	-	複数の Apple 製品などで使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-2354	2017-02-27 17:22	2017-01-23	Show	GitHub Exploit DB Packet Storm

197147	4.6	警告 Physics	アップル	-	Apple iOS および watchOS の "iPhone によるロック解除" コンポーネントにおける手首装着の保護メカニズムを回避される脆弱性	CWE-254 セキュリティ機能	CVE-2017-2352	2017-02-27 16:53	2017-01-23	Show	GitHub Exploit DB Packet Storm

197148	6.5	警告 Network	アップル	-	複数の Apple 製品などで使用される WebKit における同一生成元ポリシーを回避される脆弱性	CWE-200 情報漏えい	CVE-2017-2350	2017-02-27 16:53	2017-01-23	Show	GitHub Exploit DB Packet Storm

197149	7.8	重要 Local	アップル	-	複数の Apple 製品のカーネルコンポーネントにおける特権付きコンテキスト内で任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2017-2370	2017-02-27 16:34	2017-01-23	Show	GitHub Exploit DB Packet Storm

197150	7.8	重要 Local	アップル	-	複数の Apple 製品のカーネルコンポーネントにおける特権付きコンテキスト内で任意のコードを実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2017-2360	2017-02-27 16:29	2017-01-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
51	9.1	CRITICAL Network	-	-	FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled path input is joined with a trusted base path prior to sanitization, allo… New	CWE-22 Path Traversal	CVE-2026-44542	2026-05-15 03:26	2026-05-15	Show	GitHub Exploit DB Packet Storm

52	8.3	HIGH Network	-	-	The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expo… New	CWE-1104 Use of Unmaintained Third Party Components	CVE-2026-21821	2026-05-15 03:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

53	4.3	MEDIUM Network	-	-	CWE-601 URL redirection to untrusted site ('open redirect') New	CWE-601 Open Redirect	CVE-2026-45448	2026-05-15 03:24	2026-05-15	Show	GitHub Exploit DB Packet Storm

54	3.8	LOW Physics	-	-	A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key. New	CWE-1300 Improper Protection of Physical Side Channels	CVE-2026-6923	2026-05-15 03:24	2026-05-15	Show	GitHub Exploit DB Packet Storm

55	4.0	MEDIUM Local	-	-	An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before per… New	CWE-369 Divide By Zero	CVE-2026-46469	2026-05-15 03:24	2026-05-15	Show	GitHub Exploit DB Packet Storm

56	4.0	MEDIUM Local	-	-	An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before per… New	CWE-369 Divide By Zero	CVE-2026-46470	2026-05-15 03:24	2026-05-15	Show	GitHub Exploit DB Packet Storm

57	-		-	-	CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of … New	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-6332	2026-05-15 03:24	2026-05-15	Show	GitHub Exploit DB Packet Storm

58	9.6	CRITICAL Network	-	-	Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network. New	CWE-200 Information Exposure	CVE-2026-41615	2026-05-15 03:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

59	8.1	HIGH Network	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. New	CWE-79 Cross-site Scripting	CVE-2026-42897	2026-05-15 03:19	2026-05-15	Show	GitHub Exploit DB Packet Storm

60	9.8	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is closed using the r… New	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-45411	2026-05-15 03:19	2026-05-14	Show	GitHub Exploit DB Packet Storm