Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210021 4.3 警告 アップル
NTP Project		 - NTP の ntpd の ntp_proto.c 内の receive の symmetric-key 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-1799 2015-07-14 16:45 2015-04-7 Show GitHub Exploit DB Packet Storm
210022 9 危険 IBM - IBM Business Process Manager の REST API におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-1961 2015-07-14 16:40 2015-06-29 Show GitHub Exploit DB Packet Storm
210023 7.2 危険 VMware - Windows 上で稼働する複数の VMware 製品の vmware-vmx.exe におけるホスト OS の権限を取得される脆弱性 CWE-Other
その他 		CVE-2015-3650 2015-07-14 16:00 2015-07-9 Show GitHub Exploit DB Packet Storm
210024 7.2 危険 DELL EMC (旧 EMC Corporation) - EMC RecoverPoint for Virtual Machines における root のシェルアクセスを取得される脆弱性 CWE-Other
その他 		CVE-2015-4526 2015-07-14 15:56 2015-07-10 Show GitHub Exploit DB Packet Storm
210025 4 警告 シスコシステムズ - Cisco モビリティ サービス エンジンの制御およびプロビジョニング機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-4263 2015-07-14 15:51 2015-07-10 Show GitHub Exploit DB Packet Storm
210026 4.3 警告 シスコシステムズ - Cisco Unified Computing System C-Series サーバのソフトウェア上で稼動する Integrated Management Controller における暗号保護メカニズムを回避される脆弱性 CWE-310
暗号の問題 		CVE-2015-4259 2015-07-14 15:51 2015-07-9 Show GitHub Exploit DB Packet Storm
210027 6.8 警告 シスコシステムズ - Cisco TelePresence Advanced Media Gateway デバイスのソフトウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-4254 2015-07-14 15:51 2015-07-10 Show GitHub Exploit DB Packet Storm
210028 4.3 警告 シスコシステムズ - Cisco WebEx Meeting Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-4249 2015-07-14 15:51 2015-07-10 Show GitHub Exploit DB Packet Storm
210029 4.3 警告 シスコシステムズ - Cisco Email Security Appliance デバイス上で稼動する AsyncOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-4236 2015-07-14 15:51 2015-07-10 Show GitHub Exploit DB Packet Storm
210030 4.3 警告 シスコシステムズ - Cisco Hosted Collaboration Solution におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-4260 2015-07-14 15:48 2015-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1171 - - - An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiali… CWE-125
Out-of-bounds Read 		CVE-2024-21950 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1172 - - - Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a vict… CWE-284
Improper Access Control 		CVE-2024-36323 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1173 - - - Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arb… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2024-36334 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1174 - - - A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an atta… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-52532 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1175 - - - Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resu… CWE-1189
CVE-2025-54518 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1176 - - - Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo… CWE-1327
 Binding to an Unrestricted IP Address 		CVE-2026-0481 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1177 6.8 MEDIUM
Network 		pyload-ng_project pyload-ng pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … CWE-295
CWE-306
CWE-863
Improper Certificate Validation 
Missing Authentication for Critical Function
 Incorrect Authorization 		CVE-2026-42312 2026-05-15 23:09 2026-05-12 Show GitHub Exploit DB Packet Storm
1178 8.1 HIGH
Network 		- - The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_head' function in all versions up… CWE-862
 Missing Authorization 		CVE-2026-4094 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm
1179 6.4 MEDIUM
Network 		- - The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_default_button' shortcode in all versions up to, and including, 14.3.2. This is due to insufficient input sanitiz… CWE-79
Cross-site Scripting 		CVE-2026-6646 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm
1180 6.5 MEDIUM
Network 		- - The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endpoint in all versions up to, and … CWE-862
 Missing Authorization 		CVE-2026-4683 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm