Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204271 8.8 重要
Network 		アップル - 複数の Apple 製品で使用される libxslt における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1841 2016-05-23 17:27 2016-05-16 Show GitHub Exploit DB Packet Storm
204272 7.8 重要
Local 		アップル - 複数の Apple 製品の IOAcceleratorFamily における特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-1813 2016-05-23 17:27 2016-05-16 Show GitHub Exploit DB Packet Storm
204273 7.8 重要
Local 		アップル - 複数の Apple 製品の CoreCapture における特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-1803 2016-05-23 17:27 2016-05-16 Show GitHub Exploit DB Packet Storm
204274 8.8 重要
Network 		アップル - Apple 製品などで使用される Webkit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1855 2016-05-23 17:17 2016-05-16 Show GitHub Exploit DB Packet Storm
204275 8.8 重要
Network 		アップル - Apple OS X の Captive Network Assistant における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1800 2016-05-23 16:12 2016-05-16 Show GitHub Exploit DB Packet Storm
204276 7.8 重要
Local 		アップル - Apple OS X のオーディオにおける特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1799 2016-05-23 16:12 2016-05-16 Show GitHub Exploit DB Packet Storm
204277 3.3 低
Local 		アップル - Apple OS X のオーディオにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-1798 2016-05-23 16:12 2016-05-16 Show GitHub Exploit DB Packet Storm
204278 7.8 重要
Local 		アップル - Apple OS X の Apple Type Services における FontValidator サンドボックスポリシー制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-1797 2016-05-23 16:12 2016-05-16 Show GitHub Exploit DB Packet Storm
204279 3.3 低
Local 		アップル - Apple OS X の Apple Type Services における重要なカーネルのメモリレイアウト情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-1796 2016-05-23 16:12 2016-05-16 Show GitHub Exploit DB Packet Storm
204280 7.8 重要
Local 		アップル - Apple OS X の AppleGraphicsPowerManagement における特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1795 2016-05-23 16:12 2016-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
781 5.3 MEDIUM
Network 		- - Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, outdated cached AI summaries can leak removed content to anonymous and unpriv… CWE-200
CWE-524
CWE-672
Information Exposure
 Use of Cache Containing Sensitive Information
 Operation on a Resource after Expiration or Release 		CVE-2026-32244 2026-05-19 23:44 2026-05-19 Show GitHub Exploit DB Packet Storm
782 - - - Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, an authenticated user on a Discourse instance with the form templates feature… CWE-862
 Missing Authorization 		CVE-2026-33514 2026-05-19 23:44 2026-05-19 Show GitHub Exploit DB Packet Storm
783 10.0 CRITICAL
Network 		- - HestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web terminal component caused by a session format mismatch between PHP and Node.js that allows unauthenticated rem… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-43633 2026-05-19 23:43 2026-05-19 Show GitHub Exploit DB Packet Storm
784 6.5 MEDIUM
Network 		vercel turborepo Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the l… CWE-352
CWE-384
 Origin Validation Error
 Session Fixation 		CVE-2026-45773 2026-05-19 23:41 2026-05-16 Show GitHub Exploit DB Packet Storm
785 9.8 CRITICAL
Network 		vercel turborepo Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted reposi… CWE-426
 Untrusted Search Path 		CVE-2026-45772 2026-05-19 23:41 2026-05-16 Show GitHub Exploit DB Packet Storm
786 7.5 HIGH
Network 		ws_project ws ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the… CWE-908
 Use of Uninitialized Resource 		CVE-2026-45736 2026-05-19 23:39 2026-05-16 Show GitHub Exploit DB Packet Storm
787 7.5 HIGH
Network 		- - The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like… - CVE-2025-15609 2026-05-19 23:38 2026-05-19 Show GitHub Exploit DB Packet Storm
788 9.8 CRITICAL
Network 		- - The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all versions up to, an… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-4885 2026-05-19 23:38 2026-05-19 Show GitHub Exploit DB Packet Storm
789 9.8 CRITICAL
Network 		- - The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions up to, and including… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-4883 2026-05-19 23:38 2026-05-19 Show GitHub Exploit DB Packet Storm
790 7.5 HIGH
Network 		- - The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6. This is due to insufficient escaping on the user suppl… CWE-89
SQL Injection 		CVE-2026-8912 2026-05-19 23:38 2026-05-19 Show GitHub Exploit DB Packet Storm