Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207921 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-6092 2015-11-13 11:40 2015-11-10 Show GitHub Exploit DB Packet Storm
207922 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-6091 2015-11-13 11:40 2015-11-10 Show GitHub Exploit DB Packet Storm
207923 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-6038 2015-11-13 11:40 2015-11-10 Show GitHub Exploit DB Packet Storm
207924 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるサンドボックスの保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-2503 2015-11-13 11:40 2015-11-10 Show GitHub Exploit DB Packet Storm
207925 - - Tianocore - UEFI EDK2 の Capsule Update 処理に複数の脆弱性 - CVE-2014-4859
CVE-2014-4860 		2015-11-12 16:52 2014-08-7 Show GitHub Exploit DB Packet Storm
207926 7.1 危険 Cobham plc - Cobham Sailor 6000 シリーズの衛星通信用端末に認証情報がハードコードされている問題 CWE-Other
その他 		CVE-2014-2941 2015-11-11 17:37 2014-08-7 Show GitHub Exploit DB Packet Storm
207927 4 警告 株式会社アドウェイズ - iOS 版 Party Track SDK におけるサーバ証明書の検証不備の脆弱性 CWE-Other
その他 		CVE-2015-5655 2015-11-11 17:31 2015-10-14 Show GitHub Exploit DB Packet Storm
207928 9 危険 Haxx
アップル
Debian
オラクル		 - cURL および libcurl の fix_hostname 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-3144 2015-11-11 15:55 2015-04-22 Show GitHub Exploit DB Packet Storm
207929 7.2 危険 オラクル - Oracle Database Server の Database Scheduler における脆弱性 CWE-noinfo
情報不足 		CVE-2015-4873 2015-11-11 15:42 2015-10-20 Show GitHub Exploit DB Packet Storm
207930 10 危険 オラクル - Oracle E-Business Suite の Oracle Applications Technology Stack における DB Listener に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4839 2015-11-11 15:42 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2681 10.0 CRITICAL
Network 		- - CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web-based installer (public/installer/index.php) is vulnerable to unauthenticated Remote Code Executi… CWE-78
CWE-284
OS Command 
Improper Access Control 		CVE-2026-34234 2026-05-21 02:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2682 7.1 HIGH
Network 		- - libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decode_mask_image(). When decoding a HEIF file containing a mas… CWE-122
Heap-based Buffer Overflow 		CVE-2026-32741 2026-05-21 02:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2683 9.8 CRITICAL
Network 		- - The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization. The unmarshal_object funct… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-31072 2026-05-21 02:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2684 9.8 CRITICAL
Network 		nvidia triton_inference_server NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution,… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-24214 2026-05-21 02:13 2026-05-20 Show GitHub Exploit DB Packet Storm
2685 7.5 HIGH
Network 		adobe commerce
commerce_b2b
magento 		Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-34649 2026-05-21 02:13 2026-05-13 Show GitHub Exploit DB Packet Storm
2686 7.5 HIGH
Network 		adobe commerce
commerce_b2b
magento 		Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-34650 2026-05-21 02:13 2026-05-13 Show GitHub Exploit DB Packet Storm
2687 7.5 HIGH
Network 		adobe commerce
commerce_b2b
magento 		Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-34651 2026-05-21 02:13 2026-05-13 Show GitHub Exploit DB Packet Storm
2688 7.5 HIGH
Network 		adobe commerce
commerce_b2b
magento 		Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result i… NVD-CWE-Other
CVE-2026-34652 2026-05-21 02:12 2026-05-13 Show GitHub Exploit DB Packet Storm
2689 5.7 MEDIUM
Network 		- - Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.5.2 and prior contain a logic error in the delta API that allows share recipients … CWE-200
CWE-281
CWE-863
Information Exposure
 Improper Preservation of Permissions
 Incorrect Authorization 		CVE-2026-34600 2026-05-21 01:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2690 8.1 HIGH
Network 		- - CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contains a broken access control vulnerability where multiple admin controllers enforce permission checks on … CWE-284
CWE-862
Improper Access Control
 Missing Authorization 		CVE-2026-34358 2026-05-21 01:16 2026-05-20 Show GitHub Exploit DB Packet Storm