Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198261	5.5	警告 Local	Debian JasPer Project Fedora Project	-	JasPer の libjasper/jpc/jpc_dec.c の jpc_dec_process_siz 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-369 ゼロ除算	CVE-2016-8691	2017-03-9 16:03	2016-10-16	Show	GitHub Exploit DB Packet Storm

198262	5	警告	アップル日本電気	-	複数の Apple 製品の Secure Transport における EXPORT_RSA 暗号に対して暗号スイートのダウングレード攻撃を実行される脆弱性	CWE-310 暗号の問題	CVE-2015-1067	2017-03-9 15:34	2015-03-9	Show	GitHub Exploit DB Packet Storm

198263	7.8	危険	日本電気	-	SSL/TLS の実装が輸出グレードの RSA 鍵を受け入れる問題 (FREAK 攻撃)	CWE-Other その他	-	2017-03-9 15:33	2015-03-6	Show	GitHub Exploit DB Packet Storm

198264	4.3	警告	マイクロソフト日本電気	-	複数の Microsoft Windows 製品の Schannel における EXPORT_RSA 暗号に対して暗号スイートのダウングレード攻撃を実行される脆弱性	CWE-310 暗号の問題	CVE-2015-1637	2017-03-9 15:33	2015-03-5	Show	GitHub Exploit DB Packet Storm

198265	4.3	警告	日本電気アップルサン・マイクロシステムズヒューレット・パッカード OpenSSL Project オラクル日立	-	OpenSSL の s3_clnt.c の ssl3_get_key_exchange 関数における RSA-to-EXPORT_RSA ダウングレード攻撃を実行される脆弱性	CWE-310 暗号の問題	CVE-2015-0204	2017-03-9 15:33	2015-01-8	Show	GitHub Exploit DB Packet Storm

198266	5	警告	アップル日本電気 OpenSSL Project オラクル	-	OpenSSL の crypto/cms/cms_smime.c の do_free_upto 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-1792	2017-03-9 15:31	2015-06-11	Show	GitHub Exploit DB Packet Storm

198267	6.8	警告	アップル日本電気 OpenSSL Project オラクル	-	OpenSSL の ssl/s3_clnt.c の ssl3_get_new_session_ticket 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2015-1791	2017-03-9 15:31	2015-06-11	Show	GitHub Exploit DB Packet Storm

198268	5	警告	アップル日本電気 OpenSSL Project ヒューレット・パッカード・エンタープライズオラクル	-	OpenSSL の crypto/pkcs7/pk7_doit.c の PKCS7_dataDecode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-1790	2017-03-9 15:31	2015-06-11	Show	GitHub Exploit DB Packet Storm

198269	7.5	重要 Network	アップル日本電気 OpenSSL Project ヒューレット・パッカード・エンタープライズオラクル	-	OpenSSL の crypto/x509/x509_vfy.c の X509_cmp_time 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2015-1789	2017-03-9 15:31	2015-06-11	Show	GitHub Exploit DB Packet Storm

198270	4.3	警告	アップル日本電気 OpenSSL Project ヒューレット・パッカード・エンタープライズオラクル	-	OpenSSL の crypto/bn/bn_gf2m.c の BN_GF2m_mod_inv 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-1788	2017-03-9 15:31	2015-06-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2431	6.5	MEDIUM Network	apple	ipados iphone_os macos tvos visionos watchos	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2026-28902	2026-05-14 23:32	2026-05-12	Show	GitHub Exploit DB Packet Storm

2432	6.5	MEDIUM Network	apple	ipados iphone_os macos tvos visionos watchos	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2026-28903	2026-05-14 23:32	2026-05-12	Show	GitHub Exploit DB Packet Storm

2433	8.1	HIGH Network	apple	ipados iphone_os macos tvos visionos watchos	The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS…	CWE-20 CWE-116 Improper Input Validation Improper Encoding or Escaping of Output	CVE-2026-28907	2026-05-14 23:32	2026-05-12	Show	GitHub Exploit DB Packet Storm

2434	6.5	MEDIUM Network	apple	ipados iphone_os macos tvos visionos watchos	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processin…	CWE-416 Use After Free	CVE-2026-28942	2026-05-14 23:32	2026-05-12	Show	GitHub Exploit DB Packet Storm

2435	9.9	CRITICAL Network	microsoft	dynamics_365	Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.	CWE-94 Code Injection	CVE-2026-42898	2026-05-14 23:31	2026-05-13	Show	GitHub Exploit DB Packet Storm

2436	7.8	HIGH Local	microsoft	windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025	Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	CWE-122 CWE-190 Heap-based Buffer Overflow Integer Overflow or Wraparound	CVE-2026-42896	2026-05-14 23:31	2026-05-13	Show	GitHub Exploit DB Packet Storm

2437	7.5	HIGH Network	microsoft	copilot_chat	Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.	CWE-77 Command Injection	CVE-2026-33111	2026-05-14 23:31	2026-05-8	Show	GitHub Exploit DB Packet Storm

2438	8.8	HIGH Network	arubanetworks	arubaos sd-wan	Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabiliti…	CWE-77 Command Injection	CVE-2026-44871	2026-05-14 23:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2439	6.5	MEDIUM Network	-	-	The Unlimited Elements for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'data[filter_search]' parameter in the get_cat_addons AJAX action in versions up to and including 2.0.…	CWE-89 SQL Injection	CVE-2026-5486	2026-05-14 23:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

2440	6.4	MEDIUM Network	-	-	The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in th…	CWE-79 Cross-site Scripting	CVE-2026-5361	2026-05-14 23:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed