Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206731 7.1 危険 Lenovo
IBM		 - IBM System Networking Switch Center および Lenovo Switch Center における特権アカウントのアクセス権を取得される脆弱性 CWE-362
競合状態 		CVE-2015-7820 2015-11-16 16:58 2015-11-10 Show GitHub Exploit DB Packet Storm
206732 5 警告 Lenovo
IBM		 - IBM System Networking Switch Center および Lenovo Switch Center の DB サービスにおける重要な管理者アカウントの情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2015-7819 2015-11-16 16:58 2015-11-10 Show GitHub Exploit DB Packet Storm
206733 7.2 危険 Lenovo
IBM		 - IBM System Networking Switch Center および Lenovo Switch Center における SYSTEM 権限で任意の JSP コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-7818 2015-11-16 16:58 2015-11-10 Show GitHub Exploit DB Packet Storm
206734 7.1 危険 Lenovo
IBM		 - IBM System Networking Switch Center および Lenovo Switch Center における特権アカウントのアクセス権を取得される脆弱性 CWE-362
競合状態 		CVE-2015-7817 2015-11-16 16:58 2015-11-10 Show GitHub Exploit DB Packet Storm
206735 3.5 注意 シスコシステムズ - Cisco FireSIGHT Management Center の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6363 2015-11-16 16:20 2015-11-11 Show GitHub Exploit DB Packet Storm
206736 7.2 危険 シマンテック - Symantec Endpoint Protection のクライアントにおける権限を取得される脆弱性 CWE-Other
その他 		CVE-2015-8113 2015-11-16 16:13 2015-11-9 Show GitHub Exploit DB Packet Storm
206737 8.5 危険 シマンテック - Symantec Endpoint Protection Manager における任意の Java コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2015-6555 2015-11-16 16:13 2015-11-9 Show GitHub Exploit DB Packet Storm
206738 7.5 危険 シマンテック - Symantec Endpoint Protection Manager における任意の OS コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2015-6554 2015-11-16 16:13 2015-11-9 Show GitHub Exploit DB Packet Storm
206739 7.5 危険 Unitronics - Unitronics VisiLogic OPLC IDE における不特定のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2015-7905 2015-11-16 14:40 2015-11-12 Show GitHub Exploit DB Packet Storm
206740 6.8 警告 Unitronics - Unitronics VisiLogic OPLC IDE における脆弱性 CWE-Other
その他 		CVE-2015-6478 2015-11-16 14:40 2015-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
681 5.3 MEDIUM
Network 		mem0 mem0 The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories). The endpoint allows unauthenticated users to submit arbitrary memory recor… CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2026-31245 2026-05-15 03:39 2026-05-13 Show GitHub Exploit DB Packet Storm
682 6.5 MEDIUM
Network 		mem0 mem0 The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}). The endpoint allows unauthenticated users to delete arbitrar… CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2026-31244 2026-05-15 03:38 2026-05-13 Show GitHub Exploit DB Packet Storm
683 6.5 MEDIUM
Network 		mem0 mem0 The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint. An unauthenticated attacke… CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2026-31243 2026-05-15 03:38 2026-05-13 Show GitHub Exploit DB Packet Storm
684 9.1 CRITICAL
Network 		mem0 mem0 The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint. An unauthenticated attacker can send a DELETE r… CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2026-31242 2026-05-15 03:37 2026-05-13 Show GitHub Exploit DB Packet Storm
685 6.5 MEDIUM
Network 		mem0 mem0 The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories). The endpoint allows unauthenticated users to delete memory records by sp… CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2026-31241 2026-05-15 03:34 2026-05-13 Show GitHub Exploit DB Packet Storm
686 8.6 HIGH
Network 		vercel next.js Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to serve… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-44578 2026-05-15 03:34 2026-05-14 Show GitHub Exploit DB Packet Storm
687 7.5 HIGH
Network 		argoproj argo_workflows Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, the Webhook Interceptor loads the entire request b… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42294 2026-05-15 03:34 2026-05-9 Show GitHub Exploit DB Packet Storm
688 7.5 HIGH
Network 		vercel next.js Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerab… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44579 2026-05-15 03:34 2026-05-14 Show GitHub Exploit DB Packet Storm
689 6.1 MEDIUM
Network 		vercel next.js Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be… CWE-79
Cross-site Scripting 		CVE-2026-44580 2026-05-15 03:33 2026-05-14 Show GitHub Exploit DB Packet Storm
690 7.5 HIGH
Network 		- - Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation. CWE-253
 Incorrect Check of Function Return Value 		CVE-2026-46419 2026-05-15 03:31 2026-05-14 Show GitHub Exploit DB Packet Storm