Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199241	9.8	緊急 Network	Artifex Software	-	Artifex Software MuJS の regexp.c の regemit 関数における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2016-10141	2017-01-30 11:10	2016-12-20	Show	GitHub Exploit DB Packet Storm

199242	7.5	重要 Network	OTR	-	Gajim 用 OTR プラグインにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-9107	2017-01-30 11:08	2016-10-9	Show	GitHub Exploit DB Packet Storm

199243	8	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Virtual Traffic Manager におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-8201	2017-01-30 10:58	2016-09-13	Show	GitHub Exploit DB Packet Storm

199244	5.5	警告 Local	LG Electronics	-	MTK チップセットを使用する LG デバイスのにおける任意のサードパーティアプリケーションにアクセスされる脆弱性	CWE-200 情報漏えい	CVE-2016-10135	2017-01-30 10:46	2016-11-17	Show	GitHub Exploit DB Packet Storm

199245	8.8	重要 Network	MetalGenix	-	GeniXCMS のメディアリネーム機能におけるファイルをリネームされる脆弱性	CWE-19 データ処理	CVE-2017-5520	2017-01-30 10:44	2017-01-13	Show	GitHub Exploit DB Packet Storm

199246	7.4	重要 Network	MetalGenix	-	GeniXCMS のメディアファイルアップロード機能における SSRF 攻撃を実行される脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2017-5518	2017-01-30 10:44	2017-01-13	Show	GitHub Exploit DB Packet Storm

199247	5.5	警告 Local	PHPMailer project	-	PHPMailer の msgHTML メソッドにおける画像の相対 URL が絶対ローカルファイルパスとして処理される脆弱性	CWE-200 情報漏えい	CVE-2017-5223	2017-01-30 10:20	2017-01-9	Show	GitHub Exploit DB Packet Storm

199248	9.8	緊急 Network	GNU Project Fedora Project	-	GNU Guile の REPL サーバにおける任意のコードを実行される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8606	2017-01-27 18:26	2016-10-11	Show	GitHub Exploit DB Packet Storm

199249	5.3	警告 Network	GNU Project Fedora Project	-	GNU Guile の mkdir プロシージャにおけるプロセスの umask をゼロに変更される脆弱性	CWE-275 パーミッションの問題	CVE-2016-8605	2017-01-27 18:25	2016-10-11	Show	GitHub Exploit DB Packet Storm

199250	7	重要 Local	Linux	-	Synaptics タッチスクリーンドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8451	2017-01-27 17:00	2016-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2251	6.5	MEDIUM Network	apache	apache-airflow-providers-opensearch	The OpenSearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:password@server.example.com:9200`), wrote the full host URL — including the embed…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-43826	2026-05-13 23:05	2026-05-11	Show	GitHub Exploit DB Packet Storm

2252	7.5	HIGH Network	apple	ipados iphone_os	A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denia…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-28872	2026-05-13 23:03	2026-05-12	Show	GitHub Exploit DB Packet Storm

2253	7.5	HIGH Network	apple	ipados iphone_os macos visionos	This issue was addressed through improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5,…	CWE-359 Exposure of Private Personal Information to an Unauthorized Actor	CVE-2026-28906	2026-05-13 23:03	2026-05-12	Show	GitHub Exploit DB Packet Storm

2254	3.3	LOW Local	apple	macos	This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files.	CWE-284 Improper Access Control	CVE-2026-28910	2026-05-13 23:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

2255	5.4	MEDIUM Network	apple	ipados iphone_os macos	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may …	CWE-787 Out-of-bounds Write	CVE-2026-28819	2026-05-13 23:00	2026-05-12	Show	GitHub Exploit DB Packet Storm

2256	6.5	MEDIUM Network	apple	ipados iphone_os macos tvos visionos watchos	An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Parsing a malicio…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2026-28918	2026-05-13 22:57	2026-05-12	Show	GitHub Exploit DB Packet Storm

2257	9.8	CRITICAL Network	gnu redhat	gnutls hardened_images openshift_container_platform enterprise_linux	A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacke…	CWE-626 Null Byte Interaction Error (Poison Null Byte)	CVE-2026-42010	2026-05-13 22:54	2026-05-7	Show	GitHub Exploit DB Packet Storm

2258	7.5	HIGH Network	apple	ipados iphone_os macos tvos visionos watchos	A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26…	CWE-121 Stack-based Buffer Overflow	CVE-2026-28846	2026-05-13 22:46	2026-05-12	Show	GitHub Exploit DB Packet Storm

2259	6.1	MEDIUM Network	th30d4y	w4nn4d13\/ip	In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was direc…	CWE-79 CWE-80 Cross-site Scripting Basic XSS	CVE-2026-41575	2026-05-13 06:11	2026-05-9	Show	GitHub Exploit DB Packet Storm

2260	8.1	HIGH Network	inducer	relate	RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16.	CWE-208 CWE-203 Information Exposure Through Timing Discrepancy Information Exposure Through Discrepancy	CVE-2026-41588	2026-05-13 06:09	2026-05-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed